Mozilla to UK regulators: VPNs are essential privacy and security tools

What they're not telling you: Mozilla to UK Regulators: . VPNs Are Essential Privacy. Tools—Not Gatekeeping Tech In 2026, your internet service provider, your employer, your school, and dozens of data brokers know exactly where you are and what you're browsing—but VPN makers are being told they shouldn't help you stop them. Mozilla's submission to the UK's Department for Science, Innovation and Technology exposes the fundamental contradiction at the heart of the government's Online Safety Act: regulators want to restrict young people's access to the very privacy tools that could protect them from algorithmic manipulation and corporate surveillance. The UK's consultation on age-gating virtual private networks emerged from a specific problem—minors circumventing age assurance systems designed to keep them off harmful platforms.

The Take

Marcus Webb · Surveillance & Tech Privacy

# THE TAKE: Mozilla's Convenient Privacy Theater Mozilla's submission to UK regulators is technically accurate but strategically self-serving. Yes, VPNs mask ISP-level traffic. No, they don't solve what matters. The document conflates encryption endpoints with actual privacy. A VPN merely shifts trust from your ISP to a commercial entity with identical surveillance capabilities—often *worse* logging practices. Mozilla knows this. They're pushing regulatory cover for VPN adoption while simultaneously normalizing the privacy-industrial complex. What's absent: acknowledgment that VPN proliferation actually *strengthens* state monitoring. Encrypted tunnels trigger deeper packet inspection and metadata harvesting. UK regulators understand this already. Mozilla's brief isn't about your privacy. It's regulatory positioning—appearing principled while maintaining the illusion that consumer tools solve structural surveillance. They do not. The real issue remains unmentioned: you can't technologically escape governance infrastructure.

What the Documents Show

The government's proposed solution is blunt: restrict VPN access itself. But Mozilla's intervention reveals what mainstream tech coverage has largely missed: this isn't actually about protecting young people. It's about making age verification systems work by eliminating the technical means to bypass them. The agency is subordinating privacy protection to compliance enforcement, treating privacy tools as obstacles rather than safeguards. The framing here matters because it obscures what VPNs actually do.

Follow the Money

By masking IP addresses and encrypting traffic, VPNs reduce tracking, prevent location profiling, and protect users from data harvesting—vulnerabilities that disproportionately harm young people, who are targets for behavioral advertising and algorithmic exploitation. Mozilla's statement notes that young people face particular danger from unconsented data collection and commercial processing, yet the regulatory response is to remove access to one of the few available countermeasures. Activists, dissidents, and journalists have long depended on VPNs for survival; restricting them for minors in democracies sets a troubling precedent about which citizens get privacy tools and why. What the mainstream conversation has downplayed is the deeper problem Mozilla identifies: age-gating VPNs doesn't address root causes of online harm. It's a technical lockdown masquerading as child safety policy. The submission suggests that instead of restricting access to privacy-protecting technologies, regulators should teach young people how to use them responsibly—introducing best practices and safety tools as part of digital literacy.

What Else We Know

This would require treating teenagers as future internet users who need agency and competency, not subjects whose behavior needs limiting. The implications ripple outward. If the UK successfully restricts VPN access for minors, other democracies will follow. Young people will grow into adults without developing the habit of digital self-defense. Meanwhile, the commercial surveillance apparatus that tracks, profiles, and manipulates users will face fewer obstacles. The regulation frames VPNs as gatekeeping tools—threats to compliance—rather than what they are: equalizers against institutions far more powerful than any teenager.

Primary Sources

• Source: Hacker News
• Category: Tech & Privacy
• Cross-reference independently — don't take our word for it.

Disclosure: NewsAnarchist aggregates from public records, API feeds (Federal Register, CourtListener, MuckRock, Hacker News), and independent media. AI-assisted synthesis. Always verify primary sources linked above.