• The UK government confirmed it will not limit VPNs
• Data reveals only 7-10% of teenagers use a VPN to bypass age checks
• Social media curfews, autoplay restrictions were also announced

The UK government has officially scrapped the idea of restricting virtual private networks (VPNs) to enforce its impending social media bans, delivering a massive victory for digital privacy advocates.

Speaking on BBC Breakfast today, the government confirmed a major U-turn on the subject, with Online Safety Minister Kanishka Narayan stating: “We decided not to limit VPNs.”

This was further cemented in a written parliamentary statement by Technology Secretary Liz Kendall, who clarified that the government will not age-gate or ban the best VPN software because “VPNs have legitimate privacy and security uses.”

The announcement ends fears that sweeping age verification laws could inadvertently break online privacy for millions of adults.

Cybersecurity experts and privacy groups previously warned that restricting these tools would be a disaster waiting to happen, prompting an open letter from the industry urging lawmakers to leave everyday privacy tools alone.

Privacy wins, but platforms face new rules

While VPNs are safe from a blanket government ban, the social media ban loophole hasn’t been completely ignored.

Kendall confirmed the onus will now fall on social media platforms “to take robust steps to detect and prevent attempts by underage users to circumvent age assurance measures.”

To achieve this, the government has tasked Ofcom and the Information Commissioner’s Office (ICO) to report by October on how platforms can better detect and prevent VPN use for age-check circumvention. The government also plans to engage directly with VPN providers regarding voluntary actions.

This shift in responsibility aligns with newly released government research.

A Department for Science, Innovation and Technology (DSIT) report revealed that while 26% of 11- to 17-year-olds use a VPN, findings show they do so primarily for privacy.

Only 7-10% use them to bypass age checks, whereas 45% simply enter a false date of birth.

Midnight curfews and AI limits

While everyday privacy tools have been spared, the government is pressing forward with strict new rules to combat digital addiction — that online commentators already deemed “ineffective and useless” — with the first regulations coming into effect in early 2027.

Following the upcoming blanket ban on social media for under-16s, new measures will ensure 16- and 17-year-olds don’t face a sudden “cliff edge” of addictive features. Government consultation revealed that nearly one in three children actively want help managing their screen time.

Under the new rules, older teens will face default social media curfews from midnight to 6 am. Additionally, persuasive features like autoplaying videos and personalized infinite feeds will be switched off by default to make logging off easier.

“This is about giving these older children more choice and control over the feeds and reducing that sense that they can never switch off being online,” Kendall stated.

The protections also extend to artificial intelligence.

The government will require mandatory breaks for under-18s using AI chatbots to prevent emotional dependency. Furthermore, lawmakers are working with health regulators, including the MHRA and DHSC, to consider banning therapy chatbots entirely if they provide dangerous or unverified mental health advice to minors.