NZ drops VPN ban plan, highlighting EU age-verification dilemma
New Zealand's government has firmly ruled out restricting VPNs to enforce a youth social media ban, a reversal that underscores the mounting dilemma for European policymakers weighing similar age-gating rules against digital privacy.
New Zealand’s government has definitively ruled out banning or restricting virtual private networks as part of a planned social media ban for users under 16. Prime Minister Christopher Luxon moved swiftly to shut down the proposal after it triggered a fierce privacy backlash.
“I can reject that outright. There’s no plan to ban VPNs at all,” Luxon told reporters. Education Minister Erica Stanford’s office subsequently confirmed the government is “not looking at restricting or banning VPNs.”
The controversy erupted after a report suggested Stanford had floated VPN restrictions to prevent minors from bypassing network blocks and age checks. Coalition partner NZ First later warned that an early draft of the proposal could have opened the door to VPN limits and mandatory digital IDs.
The political pushback was immediate. Coalition partner ACT treated any anti-encryption measure as a strict red line, while the Free Speech Union branded the concept “censorship infrastructure” rather than child protection. Critics emphasised that VPNs are standard security infrastructure for businesses, journalists and individuals guarding data from hackers and surveillance, not merely tools for teenagers to circumvent rules.
A warning for European regulators
While geographically distant, New Zealand’s reversal holds direct relevance for Europe. The continent is advancing its own wave of age-gating regimes, with EU lawmakers considering barring under-16s from major platforms, Greece drafting an under-15 ban, and the UK implementing its own under-16 restrictions.
In each of these markets, VPNs present the same fundamental loophole for age verification, making them a recurring target for enforcement agencies. The UK’s parallel plans to curb children's VPN use have already drawn warnings that such measures would force intrusive age checks on law-abiding adults.
For European tech companies and investors, the New Zealand episode highlights a critical regulatory risk. Any attempt to weaken VPN encryption to enforce youth bans threatens the broader digital security infrastructure that businesses rely on. As Australia’s pioneering ban has already struggled to function as intended, European policymakers are facing the same unresolved question: how to police teenage internet use without compromising the digital security of everyone else.
