PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

VPNs Are Supposed to Protect Your Privacy. Will the UK Govt Destroy That?

The prime minister's office is considering formal ways to block children from using VPNs, sparking concerns about an age-verification requirement that could defeat the purpose of using one.

 & Michael Kan Principal Reporter

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS
(Credit: Craig Hastings via Getty Images)

The UK is signaling that it's serious about blocking children from using VPNs, which is raising concerns the country will require age verification to use the privacy tools.

The UK's Online Safety Act already mandates age verification for major social media platforms. But the government brought up the possible VPN restrictions as part of its effort to prevent children under the age of 16 from accessing online chatbots.

This consultation (the UK's term for seeking feedback and public comment on an issue) on
"children’s wellbeing online...will also confront the full range of risks children face online," the government said in its announcement. "This includes examining restrictions on children’s use of AI chatbots, as well as options to age restrict or limit children’s VPN use where it undermines safety protections and changing the age of digital consent.”

On Monday, UK Prime Minister Keir Starmer also briefly mentioned a clampdown on VPNs, calling them out as a way for children to circumvent age-verification systems.

In August, Rachel de Souza, Children's Commissioner for England, flagged VPN use as a “loophole” that needed to be closed in order to enforce the Online Safety Act. "We need age-verification on VPNs," said at the time.

A Draconian Crackdown?

However, Mullvad VPN is concerned that any age-verification for VPN apps will force companies to collect sensitive data from users when VPNs have long been seen as tool to protect privacy. 

“The correct term, however, is not age verification but identity verification,” Mullvad VPN said in a post on Mastodon. “A law like this would require everyone to identify themselves in order to use a VPN. This would pose a risk to whistleblowers, violate human rights, and represent yet another step toward an authoritarian society.”

By encrypting your internet traffic and routing it through global servers, VPNs have long been essential tools for safeguarding privacy and bypassing online censorship. It's also why the UK civil liberties group, Big Brother Watch, is criticizing the Starmer's announcement as “a draconian crackdown on the civil liberties of children and adults alike.

“The only way such restrictions could be enforced effectively would be for VPN providers to require all users to undergo age-assurance measures,” the group added. “Having to provide ID or a biometric face scan to access a VPN utterly defeats the point of a technology designed to enhance privacy online.”

About Our Expert

Michael Kan

Michael Kan

Principal Reporter

My Experience

I've been a journalist for over 15 years. I got my start as a schools and cities reporter in Kansas City and joined PCMag in 2017, where I cover satellite internet services, cybersecurity, PC hardware, and more. I'm currently based in San Francisco, but previously spent over five years in China, covering the country's technology sector.

Since 2020, I've covered the launch and explosive growth of SpaceX's Starlink satellite internet service, writing 600+ stories on availability and feature launches, but also the regulatory battles over the expansion of satellite constellations, fights with rival providers like AST SpaceMobile and Amazon, and the effort to expand into satellite-based mobile service. I've combed through FCC filings for the latest news and driven to remote corners of California to test Starlink's cellular service.

I also cover cyber threats, from ransomware gangs to the emergence of AI-based malware. In 2024 and 2025, the FTC forced Avast to pay consumers $16.5 million for secretly harvesting and selling their personal information to third-party clients, as revealed in my joint investigation with Motherboard.

I also cover the PC graphics card market. Pandemic-era shortages led me to camp out in front of a Best Buy to get an RTX 3000. I'm now following how the AI-driven memory shortage is impacting the entire consumer electronics market. I'm always eager to learn more, so please jump in the comments with feedback and send me tips.

The Best Tech I've Had:

  • My first video game console: a Nintendo Famicom
  • I loved my Sega Saturn despite PlayStation's popularity.
  • The iPod Video I received as a gift in college
  • Xbox 360 FTW
  • The Galaxy Nexus was the first smartphone I was proud to own.
  • The PC desktop I built in 2013, which still works to this day.

Read full bio