I remember the endless hand-wringing back when the Online Safety Act started flexing its muscles. Platforms had to roll out "highly effective" age assurance from 25 July 2025 to keep the little ones off the dodgy stuff, especially porn. Noble goal on paper. Then the numbers came in and, well, reality had other ideas.
According to the independent report that dropped on 14 July, daily active users of VPN apps temporarily doubled from around 650,000 before the rules hit to 1.5 million afterwards. They peaked above 1.4 million in mid-August before easing back to about 900,000 by November. Funny how that works. The government publishes its findings on children's circumvention behaviours and suddenly everyone's reminded that you can't just legislate human ingenuity out of existence.
The report also found that 26 percent of 11- to 17-year-olds have used a VPN at some point, climbing from 17 percent of the youngest to 31 percent of the 16- and 17-year-olds. Twenty-two percent had fired one up in the past three months, and among those who'd ever touched the things, 22 percent admitted it was to get at age-restricted content. Not exactly a ringing endorsement of the heavy-handed approach.
Ofcom says 64 of the top 100 porn services had slapped on some form of age assurance by June this year, with another 10 just geo-blocking the whole UK. Progress, I suppose, if your metric is ticking boxes rather than actually changing behaviour. The VPN spike tells its own story: people, including plenty of kids, simply found a way round it. Personal initiative doing what central planners never quite manage.
Regulation meets the real world
This isn't some grand victory for liberty or anything dramatic. It's just the same old pattern. You bring in sweeping rules to protect everyone from everything, promise it'll be seamless, and then watch as the clever ones, the curious ones, the ones whose parents aren't glued to the parental controls, route around the obstacles. The temporary doubling wasn't a glitch. It was a feature of how these things actually play out once the press releases fade.
The root issues, the ones no act of parliament neatly solves, sit elsewhere: family authority that's been quietly eroded, cultural shifts that treat boundaries as optional, the basic reality that teenagers have always sought out forbidden fruit. Doubling down on tech mandates and platform fines feels like treating the symptom while ignoring the patient. The kids using VPNs to dodge age checks aren't master hackers for the most part. They're just doing what resourceful humans do when top-down controls land on their digital doorstep.
