UK Online Safety Act fuels VPN surge, but free options carry hidden risks

UK Online Safety Act fuels VPN surge, but free options carry hidden risks

The introduction of the UK’s Online Safety Act on July 25 has triggered a dramatic surge in the use of Virtual Private Networks (VPNs), as popular websites implement stricter age restrictions to comply with the new legislation. Some sources are even quoting a staggering 1,400% rise in VPN demand since the Act’s enforcement.

The new law mandates that websites protect UK children from harmful content, leading platforms like Pornhub, X and Reddit to introduce or plan age verification barriers. This, in turn, has driven many younger users towards free VPNs to circumvent the restrictions. In the days immediately following the Act’s implementation, five of the top ten most-downloaded free apps in the UK were VPNs.

However, cybersecurity experts are issuing urgent warnings about the significant risks associated with unvetted free VPN services. “When you use a VPN, all your web traffic goes through one of the VPN’s servers before moving on to its ultimate destination,” explains Sam Chapman, a Senior Writer for a cybersecurity publication. “Every time you connect, you’re trusting the VPN not to abuse its access to your information, and some VPNs unfortunately abuse that trust.”

Concerns include some free VPNs selling user data for profit or containing malware, as evidenced by a 2016 study that found malware in 38% of analysed Android VPN apps. Unlike reputable providers such as Proton VPN, which offer safe free tiers supported by paid plans, many lesser-known services lack transparency, operating on the principle that “if the product is free, then the real product is you.” Examples cited include Hola VPN, which admits to selling users’ residential IPs, and FreeVPN.org, criticised for its sparse privacy policy and lack of a physical address.

Consumers are strongly advised to exercise caution and thoroughly vet any VPN service before use. Key indicators of a trustworthy provider include a clear pricing structure, independent security audits within the last three years, a specific physical location listed on their website, and a comprehensive privacy policy. Proton VPN, TunnelBear, Windscribe, and hide.me are highlighted as trusted options for safer Browse.

This surge in VPN usage underscores a critical challenge in the UK’s new digital landscape: while the Online Safety Act aims to protect, it inadvertently pushes users, particularly minors, towards potentially unsafe digital avenues if they opt for unregulated free services.

Impact on data centres

  • Increased traffic:
    The rise in VPN usage directly translates to increased data traffic through data centres, as users route their internet activity through VPN servers. 
  • Encryption demands:
    VPNs encrypt user data, adding an extra layer of processing and bandwidth requirements for data centres. 
  • Strain on infrastructure:
    The sudden and substantial increase in traffic and encryption demands can strain the capacity and resources of data centres, potentially leading to performance issues or even outages. 

Potential for increased costs
Data centres may need to invest in additional hardware and infrastructure to handle the increased load, which could translate to higher costs for VPN providers and potentially their customers.

Browse our latest issue

Intelligent CISO

View Magazine Archive