UK government’s child safety plans could expose kids to 'greater harms,' warns VPN industry group

• The VPN Trust Initiative (VTI) warns the UK against restricting VPNs
• The group argues treating VPN as 'loophole' exposes kids to "greater harms"
• The "Growing Up in an Online World" consultation is open until May 26, 2026

The debate over children's online safety in the UK has reached a boiling point. The cybersecurity industry is drawing a line in the sand as a leading coalition of VPN providers warns that restricting access to privacy tools will ultimately do more harm than good.

Anyone who uses the best VPN to secure their web traffic already knows these tools are essential for digital hygiene. However, the VPN Trust Initiative (VTI) — an industry-led consortium operating under the i2Coalition, whose members include the likes of NordVPN, Surfshark, and ExpressVPN — has published a coordinated statement addressing the UK government's consultation on children online safety, warning that lawmakers are ignoring this reality.

The ongoing "Growing Up in an Online World" government consultation is exploring ways to enforce age restrictions on social media. But privacy advocates are raising the alarm, with the VTI arguing that limiting access to fundamental digital safety tools could inadvertently expose children to greater harms online.

This pushback comes shortly after we took a closer look at the UK's online safety survey, finding that the government's framing heavily treats VPNs as a 'loophole' for dodging age verification, rather than legitimate security software.

The VTI's outcry comes on the same day that Proton's Founder and CEO, Andy Yen, warns that the global age verification push will lead to "the death of anonymity online."

A complete misunderstanding of security

The VTI's statement leaves no room for ambiguity, fiercely criticizing the government's characterization of privacy software.

"Treating VPNs primarily as a 'loophole' is a complete misunderstanding of their role," the VTI stated in its response, pointing out how the same encrypted technology used to protect corporate and government networks helps individuals protect their own privacy and security — children included.

"Policies that weaken or restrict VPNs risk reducing online safety for the very users these proposals are intended to protect, without delivering commensurate benefits," the VTI adds.

The irony of this regulatory double standard hasn't gone unnoticed.

A recent TechRadar investigation revealed that the UK government spends millions on VPNs to secure its own communications. This, while the House of Lords and regulators at Ofcom weigh further action that could restrict children's access to the exact same technology.

According to the VTI, treating these tools differently depending on who uses them ignores the fundamental reality of internet security.

Protecting the most vulnerable

For the average consumer, a virtual private network encrypts internet traffic and masks IP addresses. While this can sometimes be used to bypass geo-blocks, its primary function is to keep personal data out of the hands of hackers, scammers, and aggressive online trackers.

The VTI was quick to highlight that younger generations actually need these protections just as much as adults. By framing privacy software as a threat to children, regulators risk stripping away a vital layer of defense for those who need it most.

"Families and young people also rely on VPNs," the VTI noted.

"Students use them to access university networks safely from home and on public Wi-Fi. Young people use VPNs to reduce their exposure to tracking, scams, and harassment. Vulnerable teenagers, including LGBTQ+ youth, children experiencing domestic abuse, and those seeking sensitive health or counselling information, often rely on privacy tools to explore the Internet safely."

As the UK continues to debate how to enforce its Online Safety Act, the broader tech community remains deeply concerned. By attempting to child-proof the web through weakened encryption and restricted software, regulators may ultimately break the very mechanisms that keep everyone safe.