Labour Signals a UK VPN Ban Announcement Is Just Days Away
Key Takeaways
- Technology Secretary Liz Kendall has promised a "robust" statement on VPN restrictions this month, part of a wider package that also covers AI chatbot limits and overnight curfews for 16 and 17 year olds.
- The House of Lords voted 207 to 159 in January 2026 to ban VPN provision to under-18s, before the Commons rejected that specific ban in March and substituted a broad ministerial power to restrict or limit children's VPN use.
- Internet Matters research found only 7% of children use a VPN to bypass age checks, dwarfed by fake birthdays, borrowed logins, and shared devices, undercutting the case for VPN-focused enforcement.
- The approach is being watched well beyond Britain, with the EU's digital chief and French officials separately signaling that VPN restrictions are next on their own age-verification agendas.
A Promise Kendall Has Been Sitting On for Months
Labour's long-promised VPN statement is finally due, and Technology Secretary Liz Kendall isn't hiding what's coming. She's called it "robust," which in Westminster usually translates to "we've already decided, we're just deciding how to announce it."
The government has spent weeks signaling an imminent update, and this is the second half of a two-part rollout Kendall set up herself, with AI chatbot restrictions and overnight curfews for 16 and 17 year olds already announced as part one.
VPNs were always the piece she said she'd come back to, and that promise is now due.
The bill behind all this has been simmering for months. The House of Lords voted 207 to 159 in January to ban VPN provision to under-18s outright, under the Children's Wellbeing and Schools Bill. The Commons rejected that specific ban in March but substituted a broad ministerial power to restrict or limit children's VPN use, arguably worse since nobody yet knows how wide "restrict" is meant to stretch. The bill has been bouncing between both houses since, waiting for the statement Kendall is now delivering.
The Government's Own Evidence Undercuts the Case
What makes the coming announcement genuinely strange is the evidence Whitehall already has. When Internet Matters surveyed how UK children actually get around age checks, VPNs came in dead last, with only 7% reporting using one, dwarfed by kids simply entering fake birthdays, borrowing a parent's login, or grabbing someone else's device. One kid drew a mustache with an eyebrow pencil and fooled a facial age estimation tool. That's the actual threat model Kendall's department is up against.
And yet the legislative energy has gone entirely toward VPNs, the smallest slice of the problem by a wide margin. The government has been warned about that gap before. When the original DSIT consultation opened last year, it came with an odd admission built in, that VPNs serve legitimate privacy and security purposes for millions of adults with nothing to do with any of this. Officials asked the public for input anyway, closed the consultation in May, and now arrive at a "robust" statement that appears to have learned nothing from its own commissioned research.
The UK Is Quietly Writing the Playbook for Everyone Else
What makes this worth watching past Britain's borders is how far it reaches past the existing age-verification framework. Age checks on individual platforms are one thing. Restricting the privacy tool itself is a different category of policy, one that treats millions of adult VPN users as collateral in a fight over a 7% sliver of the problem.
Naturally, other governments are paying attention. The EU's Henna Virkkunen has already made comments in the same direction, and French officials have said openly that VPNs are next on their list too. A "robust" UK announcement hands every one of those governments a ready-made template.
So this is my challenge to Kendall and to Ofcom directly. You have the Internet Matters numbers. You know VPNs account for a small fraction of how children get around age checks. Going ahead with "robust" restrictions on VPNs instead of a serious look at fake birthdays and borrowed devices means choosing the easiest tool to regulate over the one that actually explains what's happening.
Restrictions built on the wrong evidence tend to expand rather than shrink once in place, and the smart move is protecting your access before that becomes somebody else's decision to make. Get Mysterium VPN now, while the choice is still yours.
Be part of the resistance, quietly.
Get Mysterium VPN

Gintarė is a cybersecurity writer at Mysterium VPN, where she explores online privacy, VPN technology, and the latest digital threats. With hands-on experience researching and writing about data protection and digital freedom, Gintarė makes complex security topics accessible and actionable.
