New briefing warns against restricting VPNs
Open Rights Group has warned that restricting the use of Virtual Private Networks (VPNs) is technically unworkable and a threat to privacy, cybersecurity, and freedom of expression. The briefing paper, VPNs and the Online Safety Act, also highlights that restrictions to VPNs would have little impact on online safety for under 18s.
The use of VPNs has soared in the UK since age verification requirements under the Online Safety were introduced at the end of July. Since then there have been calls to restrict VPNs so that under 18s can’t use them to get around age assurance.
Today in the House of Lords, Liberal Democrat peer Lord Clement-Jones asked the government what assessment has been made of the increased use of VPNs.
ORG’s Platform Power Programme Manager James Baker said:
“VPNs are an important cybersecurity tool. They help businesses, politicians, journalists and members of the public protect their data and communications.”
“Ideas such as age-gating VPNs would put teenagers using public wi-fi networks at higher risk of cybercrime, and expose their IP addresses to online predators.”
“Younger children are unlikely to be using a VPN while teenagers may be able to find clever workarounds to any restrictions. Adults use VPNs as they have low-trust in age assurance technologies and their would likely reduce if the Government introduced higher standards of data protection and privacy for age-checks.”
Key findings of the briefing:
VPNs are an important cybersecurity tool helping families, businesses, politicians and campaigners keep their information safe. They also help people access information in countries where there are restrictions on freedom of speech. For example, the Ministry of Defence has recognized their importance for keeping Russian citizens informed about the war in Ukraine.
Children aged 6–12, who are the primary focus of online safety reforms, are highly unlikely to use VPNs, especially where parental controls are in place.
Tech-savvy teenagers who are determined to see adult content can use a range of ways to get around age verification eg using proxy sites, Tor, P2P sharing, borrowed account credentials, or simply accessing content on alternative platforms. Restricting their ability to access VPNs is unlikely to have an impact.
The increase in VPN downloads suggests that members of the public are wary of sharing their personal information with age assurance providers. Open Rights Group is calling for the regulation of age verification providers to help protect the public’s security and privacy.
Detecting or banning VPNs is not technically feasible without extreme levels of digital authoritarianism.