Britain’s Online Safety Act aims to make digital spaces safer for children by requiring stronger age assurance on adult sites and other online platforms.
Age checks are meant to reduce minors’ access to harmful material, but the policy debate has widened as officials consider additional rules for young people online.
Fresh controversy centers on a government consultation that includes possible measures tied to VPN use.
Officials and child safety advocates are concerned that some users may rely on VPNs to get around age assurance systems.
Mozilla warns that limiting VPN access would create a serious privacy and security problem while doing little to address the real causes of online harm.
Why VPNs Entered the Debate?
Age checks in Britain have pushed some users to look for ways to avoid giving sensitive identity data, facial scans, or other verification details to adult websites and online platforms.
VPNs entered the policy fight because they can mask a user’s apparent location and make age assurance harder to enforce.
Reports said VPN usage in Britain surged soon after the Online Safety Act age checks began rolling out.
That increase drew attention among officials and child safety advocates, especially as regulators looked for ways to block minors’ access to age-restricted content.
England’s Children’s Commissioner reportedly suggested that the government should examine ways to stop children using VPNs. Mozilla argues that such an approach targets the wrong problem. VPNs are ordinary privacy and security tools, not dangerous products that should be treated like contraband. Mozilla’s position is that officials are focusing too much on a privacy tool and too little on weak age-check systems, harmful platform design, and incentives that expose children to risky material. Calls to keep regulators’ “hands off VPNs” capture Mozilla’s broader warning that weakening privacy tools will not fix flaws in Britain’s age-check system. Mozilla says VPNs are critical privacy and security tools for users of all ages. By hiding IP addresses, VPNs can help protect location data, reduce tracking, and limit IP-based profiling. For many users, that protection is part of everyday online safety. Mozilla argues that VPNs improve baseline online protection for everyone, not only people facing extreme risk. Treating them mainly as tools teenagers use to bypass rules ignores their wider safety role. Basic security infrastructure should not be weakened because some users may misuse it. Mozilla says VPNs are critical privacy and security tools for users of all ages. For readers asking how does a VPN work, the basic idea is that a VPN creates an encrypted tunnel between a user’s device and a VPN server, routes internet traffic through that tunnel, and replaces the user’s visible IP address with the server’s IP address. By hiding IP addresses, VPNs can help protect location data, reduce tracking, and limit IP-based profiling. For many users, that protection is part of everyday online safety. Age-gating VPN access would likely require users to provide personal information before using software designed to reduce tracking and data collection. That creates a major privacy contradiction. People may need to identify themselves before using a tool meant to help them avoid identification, profiling, and surveillance. Mozilla warns that such rules could weaken fundamental rights for all users, not only adults seeking age-restricted content. A person who wants stronger privacy on public Wi-Fi, at work, at school, or during travel could face new barriers before accessing basic protection. Required identity checks could also discourage careful users. Some people may avoid VPNs entirely if access requires added verification, especially if they distrust how verification data will be stored, shared, or protected. Greater exposure to tracking, location inference, and profiling would be an expected side effect. A policy meant to protect children could end up normalizing more data collection across the internet. Mozilla argues that restricting VPNs would not effectively protect children online. Limiting access to privacy tools may punish legitimate users while leaving more common bypass methods untouched. Research cited in the debate suggests relatively few children use VPNs, and only a small minority use them specifically to bypass age restrictions. Targeting VPNs does not solve those weaknesses. A child who can borrow an account, enter a false birth date, or exploit unreliable age checks may not need a VPN at all. Mozilla’s broader critique is that policymakers are chasing the wrong target. Stronger child protection should focus on harmful platform practices, weak verification design, and online incentives that push risky content toward young users. Restricting VPNs would not fix those causes. Young people face serious risks tied to online tracking, targeted advertising, and commercial data collection carried out without enough consent or transparency. Mozilla argues that cutting off access to privacy tools may make those risks worse. VPN access is not only an adult privacy issue. For younger users, learning how privacy tools work can be part of digital literacy and safer internet use. Students need to learn how to protect data, recognize tracking, and use security tools responsibly. Blocking or age-gating VPNs may conflict with the goal of helping young people develop safer online habits. Instead of treating privacy tools as suspect, regulators could support education around responsible use. Mozilla’s argument shifts the focus away from banning tools and toward teaching safer behavior. Young people should learn how to use key safety and privacy tools as they engage with digital technology. Mozilla criticizes UK plans to require age verification for VPNs, arguing that VPNs are vital privacy and safety tools for people of all ages, including children. Citing studies, it says few kids use VPNs to bypass age checks; most use them to protect data, while many bypass… — Marius Fanu (@mariusfanu) May 19, 2026 Protecting children online and preserving privacy infrastructure are both important goals. Britain’s age-check debate shows how easily those goals can come into conflict when regulators target tools instead of harms. Mozilla warns that weakening VPN access could produce more surveillance, greater data exposure, and lower security without meaningfully reducing online harms for children. Age-gating VPNs would place new identity checks in front of tools designed to reduce tracking and protect users.
VPNs Are Essential Privacy Tools
Privacy Contradiction Created by Age-Gating VPNs
Mozilla’s Critique of Effectiveness
Risks for Young People Specifically
FAQs
Summary
