16 KiB
16 KiB
UK VPN Ban Investigation - Initial Findings
Investigation Date: 2026-03-24 Status: Active - Initial OSINT Collection
Executive Summary
On January 21, 2026, the UK House of Lords voted 207-159 to ban VPN services for under-18s as Amendment 92 to the Children's Wellbeing and Schools Bill. The same session passed mandatory device-level surveillance software on all smartphones and tablets, and a social media ban for under-16s (261-150). These amendments were introduced by Conservative and crossbench peers with documented ties to private equity, government contracting, and the age verification industry. The Age Verification Providers Association (AVPA), a trade body representing companies that sell age-checking technology, actively lobbied for VPN age checks, creating a direct financial incentive loop: the organizations advocating for the legislation are the same ones that profit from its enforcement.
1. The Amendments
Amendment 92 - VPN Prohibition
- Sponsor: Lord Nash (Conservative)
- Co-sponsors: Baroness Cass (Crossbench), Baroness Benjamin (Liberal Democrat)
- Vote: 207-159 (majority Conservative yes, majority Labour no)
- Mechanism: Requires the Secretary of State to introduce regulations within 12 months prohibiting VPN services to under-18s. VPN providers must implement "highly effective" age assurance for all UK users.
- Regulator: Ofcom produces guidance for VPN provider compliance.
Device Surveillance Amendment
- Requirement: All smartphones and tablets sold in the UK must include "tamper-proof system software" that scans for child sexual abuse material (CSAM).
- Technical concern: Germany's 2024 data showed 48.3% false positive rates in similar client-side scanning systems.
Social Media Ban
- Vote: 261-150 (widest margin)
- Requirement: Australian-style ban requiring "highly effective" age verification for social media access by under-16s.
Status
These amendments now go to the House of Commons via "ping-pong." The government opposed all three. A three-month consultation was launched as an alternative.
2. Key Political Figures
Lord Nash (John Alfred Stoddard Nash, Baron Nash)
- Party: Conservative
- Role: Proposed Amendment 92 (VPN ban)
- Background: Venture capitalist. Co-founder of Sovereign Capital (1988), a private equity firm investing in education, healthcare, and support services. Former Chair of British Venture Capital Association. Former Assistant Director, Lazard Brothers.
- Government role: Parliamentary Under Secretary of State for Schools (2013-2017). Took five Acts through the Lords during tenure.
- Financial interests: Declared interests in 75 companies, at least 22 of which received public money. Early investor in Softcat (IT infrastructure), held 11% shares at IPO. Former chairman of Care UK (major NHS contractor).
- Government contracting: Linked to £3.8 billion in government contracts (New Statesman investigation). £100 million link to private government contractor (Byline Times investigation).
- Party donations: He and his wife donated nearly £300,000 to the Conservative Party.
- Technology investments: Remains an active investor in early-stage software and technology businesses.
- Conflict of interest question: A venture capitalist with technology investments and extensive government contracting ties proposing legislation that creates a new mandatory technology market worth billions.
Baroness Kidron (Beeban Tania Kidron, OBE)
- Party: Crossbench
- Role: Founder and Chair of 5Rights Foundation. Architect of the Age Appropriate Design Code (introduced as amendment to Data Protection Act 2018).
- Background: Filmmaker and documentary director. Director of Cross Street Films (Trading) Ltd.
- Influence: Designed the policy framework that underpins the Online Safety Act's age verification requirements. US Senate testimony on child online safety. Broadband Commission commissioner.
- Quotes: Called government consultation "the playground of the tech lobbyist." Stated Ofcom is "too timid, too close to tech, too secretive."
- Registered interests: Director of Cross Street Films. Income from creative industries, royalties, research, writing, speaking, and advisory work.
Baroness Benjamin (Floella Karen Yunies Benjamin, OM DBE DL)
- Party: Liberal Democrat
- Role: Co-sponsor of VPN ban amendment
- Background: Actress, presenter (Play School, Play Away), author.
- Notable: Former OFCOM Content Board Member (2003-2006). Former BBC Advisory Board Member (2017-2019). First actress to become a peer.
- Regulatory connection: Direct prior experience on the content regulatory body now responsible for enforcing age verification.
Baroness Cass (Dr. Hilary Cass)
- Party: Crossbench
- Role: Co-sponsor of VPN ban amendment
- Background: Paediatrician. Former President of the Royal College of Paediatrics and Child Health. Author of the Cass Review into trans youth healthcare.
- Entered Lords: July 2024 (dissolution peerage)
- Quote: "The first duty of Government is not to consult, it is to act."
Baroness Barran
- Party: Conservative
- Role: Shadow Education Minister. Supported VPN ban.
- Quote: "We don't need another national conversation."
Dame Melanie Dawes (Ofcom CEO)
- Background: Career civil servant since 1989. Former Permanent Secretary at Ministry of Housing, Communities and Local Government (2015-2020). Former Director General, Economic and Domestic Affairs Secretariat, Cabinet Office (2011-2015). Former Head of Business Tax, HMRC. 15 years at HM Treasury.
- Concern: Directly moved from senior civil service to lead the regulator implementing the Online Safety Act. Classic revolving-door trajectory.
Peter Kyle (Technology Secretary, DSIT)
- Position: Stated government has no plans for outright VPN ban. Committed to looking "very closely" at VPN usage. Government opposed Lords amendments.
3. The Lobbying Ecosystem
Age Verification Providers Association (AVPA)
- Founded: 2018, from the Digital Policy Alliance's age verification working group
- Type: Not-for-profit trade body
- Members: 34 organizations including Yoti, AgeChecked, GBG, Pay360, Verime, W2, plus associates AgeGo, AgeID, ServeLegal
- EU Lobbying: Registered on LobbyFacts.eu (EU Transparency Register ID: 490034139503-15)
- Key lobbying action: Pushed to extend age verification requirements to VPN users. Wants platforms to detect VPN usage and analyze user behavior to determine if a user might be a minor, creating additional billable verification events for AVPA member companies.
- Direct financial interest: Every expansion of age verification requirements creates new revenue for AVPA members. The VPN ban forces VPN providers to become customers of AVPA member companies.
5Rights Foundation
- Founded: 2018 by Baroness Kidron
- Charity: GB-CHC-1178581
- Company: 11271356 (Companies House)
- Financials (2023): Income £1,469,940 / Expenditure £1,795,993 / Reserves £535,768
- Grants received (360Giving):
- Prudence Trust: £745,500
- Indigo Trust: £450,000 (2 grants)
- Paul Hamlyn Foundation: £175,000
- Rothschild Foundation: £150,000
- Total tracked: £1,520,500
- Additional funders: Oak Foundation, Omidyar Network, Luminate, End Violence, IEEE
- EU lobbying: Registered on LobbyFacts.eu
- Role: Designed the policy architecture (AADC, OSA framework). Baroness Kidron uses 5Rights research to justify legislative amendments in the Lords.
Digital Policy Alliance (DPA)
- Founded: 1993 (as EURIM), relaunched 2012
- Role: Incubated the AVPA. Created PAS 1296 age checking specification (2018). Members include MPs, Peers, and corporate members (historically Amazon, Symantec, MindGeek/Aylo, Equifax).
- Connection: The pipeline from DPA working group to AVPA trade body to legislative lobbying represents a direct path from industry standards-setting to regulatory capture.
Internet Watch Foundation (IWF)
- Role: Secretariat of the APPG on Children's Online Safety (from September 2024)
- Funding: 90% from internet industry (152 global members including Meta, Microsoft, Google). 10% from European Commission.
- Governance: 11 trustees (6 independent, 3 industry, 1 co-opted, 1 chair)
- Infrastructure: Cloudflare-hosted, Mimecast email
- Dual role: Simultaneously funded by tech companies and serving as secretariat for the parliamentary group overseeing those companies' regulation.
NSPCC
- Campaign: "Wild West Web" campaign (since 2018) directly shaped the Online Safety Bill.
- Funding: Receives Oak Foundation grants specifically for online safety advocacy.
- Influence: Worked closely with ministers, MPs, and Lords to strengthen the OSA.
APPG on Children's Online Safety
- Secretariat: IWF (from September 2024). Previously UK Safer Internet Centre (from July 2020).
- Function: Cross-party coalition influencing policy, raising awareness, driving legislative change.
4. Funding & Financial Flow Map
Oak Foundation ──────────────────┐
Omidyar Network / Luminate ──────┤
Prudence Trust (£745K) ──────────┤
Indigo Trust / Sainsbury (£450K)─┼──▶ 5Rights Foundation ──▶ Policy Design (AADC, OSA framework)
Paul Hamlyn Foundation (£175K) ──┤ │
Rothschild Foundation (£150K) ───┤ │
End Violence ────────────────────┘ │
▼
Baroness Kidron
(Founder/Chair)
│
Uses 5Rights research in Lords
│
▼
Legislative Amendments
(OSA, AADC, CWS Bill)
│
▼
Ofcom Enforcement
│
▼
Mandatory Age Verification
│
▼
AVPA Members (Yoti, etc.) profit
▲ │
│ ▼
AVPA lobbies for Market grows
expanded scope ◀── ($2.5B → $7.1B)
(VPNs, devices)
DPA (1993) ──▶ AV Working Group (2014) ──▶ AVPA (2018) ──▶ Lobbying for VPN age checks
│ │
└── Members: Amazon, MindGeek/Aylo, Equifax │
▼
Lords Amendment 92 (VPN ban)
│
▼
Lord Nash (proposer)
- VC / PE background
- 75 company interests
- £300K Tory donations
- £3.8B govt contract links
IWF (90% industry funded) ──▶ APPG Secretariat ──▶ Parliamentary influence
▲ │
│ ▼
Meta, Microsoft, Google ─── fund IWF ──── get regulated by APPG-influenced policy
5. The Conflict of Interest Loop
The investigation reveals a self-reinforcing cycle:
-
Foundation funding: Wealthy foundations (Oak, Omidyar, Prudence Trust, Indigo/Sainsbury) fund 5Rights Foundation to design policy frameworks.
-
Policy design: 5Rights creates the intellectual framework for age verification mandates (AADC, OSA principles). Baroness Kidron, as both 5Rights chair and a legislating peer, introduces these frameworks as amendments.
-
Industry formation: The Digital Policy Alliance's age verification working group spawns the AVPA trade body in 2018, the same year 5Rights is founded and the AADC passes.
-
Legislative expansion: AVPA members lobby for expanded age verification scope (VPN users, device-level, social media) because each expansion creates new customers.
-
Regulatory enforcement: Ofcom, led by a former senior civil servant, enforces the mandates, fining non-compliant sites and driving them to purchase AVPA member services.
-
Market growth: The age verification market grows from $2.5B to a projected $7.1B. Yoti's revenue triples from $14M to $47.9M in two years.
-
Further lobbying: With growing revenues, AVPA members fund more lobbying for further expansion. The cycle repeats.
The IWF adds a secondary loop: funded 90% by the tech industry it helps regulate, while serving as secretariat for the parliamentary group that oversees online safety policy.
6. Public Response
- Petition to repeal the Online Safety Act gathered 550,137 signatures before closing (October 2025).
- VPN usage surged 1,400-1,800% following OSA age verification enforcement (July 2025).
- AVPA reports 5 million additional daily age checks from UK users.
- Multiple petitions opposing VPN ban (5,095+ signatures and growing).
- Opposition from Big Brother Watch, Open Rights Group, EFF, Index on Censorship.
- Celebrity supporters of restrictions: Hugh Grant, Peter Andre.
7. Open Questions for Further Investigation
- Lord Nash's technology investments: Which of his 75 declared company interests operate in identity verification, age assurance, or adjacent markets?
- AVPA member donations: Have AVPA member companies or their executives donated to Conservative MPs or Lords who supported the amendments?
- Yoti government contracts: Full scope of Yoti's UK government contracts and regulatory sandbox participation.
- Prudence Trust: Who controls Prudence Trust, and what is its connection to the age verification industry? (Largest single donor to 5Rights at £745,500.)
- Ofcom personnel: Former Ofcom staff now working at age verification companies, and vice versa.
- Cross-border coordination: Coordination between UK (OSA/CWS Bill), US (KOSA/COPPA 2.0), and Australian (social media ban) lobbying efforts. Shared actors and funding sources.
- MindGeek/Aylo connection: Former DPA member MindGeek (now Aylo) developed AgeID. What is their current relationship with the AVPA and DPA?
- IWF dual role: Full mapping of IWF board members' connections to tech companies it is funded by and the APPG it serves.
- Baroness Benjamin's Ofcom tenure: What age verification or content policies did she influence during her 2003-2006 Ofcom Content Board term?
- Device surveillance mandate: Which companies would supply "tamper-proof system software"? Who lobbied for this specific amendment?
Sources: See sources.md for complete source index.