Online safety act tests privacy and tech sector

New UK rules push age verification and data practices, prompting VPN use and raising questions about privacy and enforcement.

UK Online Safety Act tests privacy and tech industry

Britain's Online Safety Act, introduced on July 25, 2025, tightens age verification for adult content and sets rules to block access by under 18. It requires robust checks to verify age, including methods such as credit card details, facial scans, and passport images, and it gives regulators power to enforce through fines or bans for noncompliance. The act also broadens data handling expectations, with data retention rules that supporters say help fight crime while critics warn about privacy risks. Ofcom reports show 71 percent of respondents believe the measures will improve online safety for children.

Against this backdrop, VPNs have surged as Britons seek encryption and privacy. VPNs create an encrypted tunnel, hiding traffic from ISPs and advertisers, which is why many users turn to these tools even as the new rules raise questions about enforcement and transparency. Some providers warn about the risks of free services or weak privacy protections, while regulators stress the need for clear safeguards. The policy aims to curb misuse while leaving room for legitimate privacy needs, a balance that will be tested as the law comes into effect.

The act frames safety as a public good, but its reach into data and identity checks raises fundamental questions about who gets to see what online. Regulators face a tough task: enforce compliance without letting surveillance overstep, and ensure privacy protections keep pace with new verification demands. The spike in VPN use signals a demand for privacy that lawmakers cannot ignore, even as they seek to shield minors from harmful content. The policy landscape will test whether governments can secure child safety while preserving individual autonomy in a data-driven world.

Highlights

Policy design will determine whether safety goals can be met without eroding privacy.