OFCOM discourages VPN use to avoid age verification checks – but privacy advocates see no alternative

If you live in the UK, you will have seen the news that OFCOM's Online Safety Bill age-verification law has come into effect. It has been developed to protect children from harmful content – but there are serious flaws.

For most privacy advocates, the idea of letting a website’s AI tool scan, analyse and keep a copy of your facial data is a step too far. Uploading copies of official documents is equally unpalatable, particularly when many of these sites will have little-to-know track record of looking after such sensitive user data.

Instead, users will likely reach for their own privacy solution, such as a VPN, to keep them safe.

NordVPN – our top pick for private browsing
After testing and reviewing dozens of VPNs, NordVPN came out on top. It's a well-balanced package with great speeds, servers in 126 countries, and excellent privacy credentials. It's also very effective at accessing geo-blocked content on sites like Netflix.

One subscription covers 10 devices, and plans start at a reasonable $2.91 per month ($81.36 plus tax up front for 28 months). There's a 30-day refund period in case you don't like it.

View Deal

What’s wrong with the age-verification checks?

There's plenty of recent evidence that even large corporations are incapable of protecting customer data. Earlier this year, UK retailers Marks and Spencer and Co-op were brought to their knees by cyber attacks, and reams of names, contact information and even home addresses were stolen.

Companies like Google and Meta have built their business models on collecting as much personal data as possible. Other companies harvest what they can and sell it to the highest bidder. Who's to say one of these age-verification applications won't be hacked, or simply auction off your likeness and driving licence?

What's more, we already know that the restrictions don't work properly. For example, Reddit relies on NSFW community moderators to tag their content as such. Should any of these communities go under the radar – which many do – this content will not require age verification to view.

Similarly, adult sites with low UK traffic are still freely available. This is due to the way the Online Safety Bill is enforced. The websites themselves must enforce age verification, and if a particular website doesn't see much traffic from the UK, there's no reason for it to abide by the bill.

The protection of children from harmful adult content is important, but the current system of age verification is deeply flawed, easily sidestepped, and puts the online privacy of tens of millions of people at critical risk.

Why you should consider using a VPN

Any VPN that allows you to choose which server you connect will be able to help.

However, the best VPNs aren't just for accessing blocked content or streaming a Netflix show only available in Canada. They're the perfect starting point for taking your online privacy more seriously – and avoiding uploading your face to an age-verification app is just the start.

By encrypting your data, they hide what you're doing online from anyone watching. Typically, this is your internet provider – some are known to collect and sell your browsing habits – but it could also be your college administrator, or even a hacker on an unsecured Wi-Fi network.

At Tom's Guide, we've tested dozens, and there are a handful we can wholeheartedly recommend as user-friendly, privacy-focused services that do what they say on the tin. Our top pick is NordVPN, but Surfshark is a cheaper alternative. ExpressVPN is a little more expensive, but comes with a huge suite of extra tools like cyber insurance and personal data removal.