According to TechRadar, UK communications regulator Ofcom has announced it is gathering more information on VPN use to decide if “further action” is needed, particularly regarding young people bypassing age checks. The agency revealed in a Freedom of Information request that it has spent nearly £500,000 on internet monitoring software and services since 2022, sourcing its VPN usage data from platforms like Apptopia, SimilarWeb, and Ipsos Iris. Ofcom is now expanding its evidence by launching a youth advisory panel with the Children’s Commissioner and adding VPN questions to its annual Children and Parents Media Literacy Tracker. A full report on this data is expected in May 2026, which will guide the regulator’s decisions on what “proportionate” measures might look like.
The Data-Gathering Machine
Here’s the thing: this isn’t just some casual inquiry. Ofcom is building a massive, multi-pronged evidence base, and they’re spending serious cash to do it. Nearly half a million pounds on monitoring tools? That’s a significant investment for a regulator. They’re combining technical data from app intelligence firms with direct surveys and even creating a panel to hear from kids themselves. It’s a full-spectrum approach designed to leave no argument uncharted. They want to know exactly how prevalent VPN use is, who’s using them, and for what. Basically, they’re constructing a bulletproof case for whatever comes next.
Why The Sudden Focus?
So why now? The catalyst is clearly the Online Safety Act. The law puts huge pressure on platforms to implement robust age verification. But a VPN is a master key that can undo all that digital lock-picking. From Ofcom’s perspective, if a significant portion of teens can simply tunnel around these new safeguards, the entire regulatory framework has a major flaw. I think they’re genuinely trying to understand the scale of the problem. Is this a niche tech-savvy trick, or is it becoming as common as using incognito mode? Their actions suggest they suspect it’s trending toward the latter.
What Could “Further Action” Look Like?
This is the million-dollar question, isn’t it? Ofcom is being deliberately vague, which is always a bit worrying. “Proportionate” is the key word they’re using. But let’s be real: what does a regulator do when a technology exists primarily to circumvent other rules? They can’t really ban VPNs outright—they’re crucial for business security and privacy. But could they pressure app stores to restrict VPN apps for younger users? Or mandate that VPN providers themselves implement some form of age-gating? It feels like a regulatory minefield. The pushback from privacy advocates and the tech industry would be fierce.
A Watchful Eye
Look, the core tension here is classic: safety versus privacy, control versus freedom. Ofcom has a mandate to make the internet safer for kids, and they’re pursuing it with a well-funded, methodical strategy. But this kind of deep monitoring and the potential for restricting core privacy tools should give everyone pause. We’re talking about a government agency spending heavily to watch how citizens use tools designed for anonymity. The report in 2026 will be a major moment. Until then, Ofcom is watching, listening, and building its case. The question is, what will they decide to do with all that information?
