236 lines
16 KiB
Markdown
236 lines
16 KiB
Markdown
# UK VPN Ban Investigation - Initial Findings
|
|
|
|
Investigation Date: 2026-03-24
|
|
Status: Active - Initial OSINT Collection
|
|
|
|
---
|
|
|
|
## Executive Summary
|
|
|
|
On January 21, 2026, the UK House of Lords voted 207-159 to ban VPN services for under-18s as Amendment 92 to the Children's Wellbeing and Schools Bill. The same session passed mandatory device-level surveillance software on all smartphones and tablets, and a social media ban for under-16s (261-150). These amendments were introduced by Conservative and crossbench peers with documented ties to private equity, government contracting, and the age verification industry. The Age Verification Providers Association (AVPA), a trade body representing companies that sell age-checking technology, actively lobbied for VPN age checks, creating a direct financial incentive loop: the organizations advocating for the legislation are the same ones that profit from its enforcement.
|
|
|
|
---
|
|
|
|
## 1. The Amendments
|
|
|
|
### Amendment 92 - VPN Prohibition
|
|
- **Sponsor**: Lord Nash (Conservative)
|
|
- **Co-sponsors**: Baroness Cass (Crossbench), Baroness Benjamin (Liberal Democrat)
|
|
- **Vote**: 207-159 (majority Conservative yes, majority Labour no)
|
|
- **Mechanism**: Requires the Secretary of State to introduce regulations within 12 months prohibiting VPN services to under-18s. VPN providers must implement "highly effective" age assurance for all UK users.
|
|
- **Regulator**: Ofcom produces guidance for VPN provider compliance.
|
|
|
|
### Device Surveillance Amendment
|
|
- **Requirement**: All smartphones and tablets sold in the UK must include "tamper-proof system software" that scans for child sexual abuse material (CSAM).
|
|
- **Technical concern**: Germany's 2024 data showed 48.3% false positive rates in similar client-side scanning systems.
|
|
|
|
### Social Media Ban
|
|
- **Vote**: 261-150 (widest margin)
|
|
- **Requirement**: Australian-style ban requiring "highly effective" age verification for social media access by under-16s.
|
|
|
|
### Status
|
|
These amendments now go to the House of Commons via "ping-pong." The government opposed all three. A three-month consultation was launched as an alternative.
|
|
|
|
---
|
|
|
|
## 2. Key Political Figures
|
|
|
|
### Lord Nash (John Alfred Stoddard Nash, Baron Nash)
|
|
- **Party**: Conservative
|
|
- **Role**: Proposed Amendment 92 (VPN ban)
|
|
- **Background**: Venture capitalist. Co-founder of Sovereign Capital (1988), a private equity firm investing in education, healthcare, and support services. Former Chair of British Venture Capital Association. Former Assistant Director, Lazard Brothers.
|
|
- **Government role**: Parliamentary Under Secretary of State for Schools (2013-2017). Took five Acts through the Lords during tenure.
|
|
- **Financial interests**: Declared interests in 75 companies, at least 22 of which received public money. Early investor in Softcat (IT infrastructure), held 11% shares at IPO. Former chairman of Care UK (major NHS contractor).
|
|
- **Government contracting**: Linked to £3.8 billion in government contracts (New Statesman investigation). £100 million link to private government contractor (Byline Times investigation).
|
|
- **Party donations**: He and his wife donated nearly £300,000 to the Conservative Party.
|
|
- **Technology investments**: Remains an active investor in early-stage software and technology businesses.
|
|
- **Conflict of interest question**: A venture capitalist with technology investments and extensive government contracting ties proposing legislation that creates a new mandatory technology market worth billions.
|
|
|
|
### Baroness Kidron (Beeban Tania Kidron, OBE)
|
|
- **Party**: Crossbench
|
|
- **Role**: Founder and Chair of 5Rights Foundation. Architect of the Age Appropriate Design Code (introduced as amendment to Data Protection Act 2018).
|
|
- **Background**: Filmmaker and documentary director. Director of Cross Street Films (Trading) Ltd.
|
|
- **Influence**: Designed the policy framework that underpins the Online Safety Act's age verification requirements. US Senate testimony on child online safety. Broadband Commission commissioner.
|
|
- **Quotes**: Called government consultation "the playground of the tech lobbyist." Stated Ofcom is "too timid, too close to tech, too secretive."
|
|
- **Registered interests**: Director of Cross Street Films. Income from creative industries, royalties, research, writing, speaking, and advisory work.
|
|
|
|
### Baroness Benjamin (Floella Karen Yunies Benjamin, OM DBE DL)
|
|
- **Party**: Liberal Democrat
|
|
- **Role**: Co-sponsor of VPN ban amendment
|
|
- **Background**: Actress, presenter (Play School, Play Away), author.
|
|
- **Notable**: Former OFCOM Content Board Member (2003-2006). Former BBC Advisory Board Member (2017-2019). First actress to become a peer.
|
|
- **Regulatory connection**: Direct prior experience on the content regulatory body now responsible for enforcing age verification.
|
|
|
|
### Baroness Cass (Dr. Hilary Cass)
|
|
- **Party**: Crossbench
|
|
- **Role**: Co-sponsor of VPN ban amendment
|
|
- **Background**: Paediatrician. Former President of the Royal College of Paediatrics and Child Health. Author of the Cass Review into trans youth healthcare.
|
|
- **Entered Lords**: July 2024 (dissolution peerage)
|
|
- **Quote**: "The first duty of Government is not to consult, it is to act."
|
|
|
|
### Baroness Barran
|
|
- **Party**: Conservative
|
|
- **Role**: Shadow Education Minister. Supported VPN ban.
|
|
- **Quote**: "We don't need another national conversation."
|
|
|
|
### Dame Melanie Dawes (Ofcom CEO)
|
|
- **Background**: Career civil servant since 1989. Former Permanent Secretary at Ministry of Housing, Communities and Local Government (2015-2020). Former Director General, Economic and Domestic Affairs Secretariat, Cabinet Office (2011-2015). Former Head of Business Tax, HMRC. 15 years at HM Treasury.
|
|
- **Concern**: Directly moved from senior civil service to lead the regulator implementing the Online Safety Act. Classic revolving-door trajectory.
|
|
|
|
### Peter Kyle (Technology Secretary, DSIT)
|
|
- **Position**: Stated government has no plans for outright VPN ban. Committed to looking "very closely" at VPN usage. Government opposed Lords amendments.
|
|
|
|
---
|
|
|
|
## 3. The Lobbying Ecosystem
|
|
|
|
### Age Verification Providers Association (AVPA)
|
|
- **Founded**: 2018, from the Digital Policy Alliance's age verification working group
|
|
- **Type**: Not-for-profit trade body
|
|
- **Members**: 34 organizations including Yoti, AgeChecked, GBG, Pay360, Verime, W2, plus associates AgeGo, AgeID, ServeLegal
|
|
- **EU Lobbying**: Registered on LobbyFacts.eu (EU Transparency Register ID: 490034139503-15)
|
|
- **Key lobbying action**: Pushed to extend age verification requirements to VPN users. Wants platforms to detect VPN usage and analyze user behavior to determine if a user might be a minor, creating additional billable verification events for AVPA member companies.
|
|
- **Direct financial interest**: Every expansion of age verification requirements creates new revenue for AVPA members. The VPN ban forces VPN providers to become customers of AVPA member companies.
|
|
|
|
### 5Rights Foundation
|
|
- **Founded**: 2018 by Baroness Kidron
|
|
- **Charity**: GB-CHC-1178581
|
|
- **Company**: 11271356 (Companies House)
|
|
- **Financials (2023)**: Income £1,469,940 / Expenditure £1,795,993 / Reserves £535,768
|
|
- **Grants received** (360Giving):
|
|
- Prudence Trust: £745,500
|
|
- Indigo Trust: £450,000 (2 grants)
|
|
- Paul Hamlyn Foundation: £175,000
|
|
- Rothschild Foundation: £150,000
|
|
- Total tracked: £1,520,500
|
|
- **Additional funders**: Oak Foundation, Omidyar Network, Luminate, End Violence, IEEE
|
|
- **EU lobbying**: Registered on LobbyFacts.eu
|
|
- **Role**: Designed the policy architecture (AADC, OSA framework). Baroness Kidron uses 5Rights research to justify legislative amendments in the Lords.
|
|
|
|
### Digital Policy Alliance (DPA)
|
|
- **Founded**: 1993 (as EURIM), relaunched 2012
|
|
- **Role**: Incubated the AVPA. Created PAS 1296 age checking specification (2018). Members include MPs, Peers, and corporate members (historically Amazon, Symantec, MindGeek/Aylo, Equifax).
|
|
- **Connection**: The pipeline from DPA working group to AVPA trade body to legislative lobbying represents a direct path from industry standards-setting to regulatory capture.
|
|
|
|
### Internet Watch Foundation (IWF)
|
|
- **Role**: Secretariat of the APPG on Children's Online Safety (from September 2024)
|
|
- **Funding**: 90% from internet industry (152 global members including Meta, Microsoft, Google). 10% from European Commission.
|
|
- **Governance**: 11 trustees (6 independent, 3 industry, 1 co-opted, 1 chair)
|
|
- **Infrastructure**: Cloudflare-hosted, Mimecast email
|
|
- **Dual role**: Simultaneously funded by tech companies and serving as secretariat for the parliamentary group overseeing those companies' regulation.
|
|
|
|
### NSPCC
|
|
- **Campaign**: "Wild West Web" campaign (since 2018) directly shaped the Online Safety Bill.
|
|
- **Funding**: Receives Oak Foundation grants specifically for online safety advocacy.
|
|
- **Influence**: Worked closely with ministers, MPs, and Lords to strengthen the OSA.
|
|
|
|
### APPG on Children's Online Safety
|
|
- **Secretariat**: IWF (from September 2024). Previously UK Safer Internet Centre (from July 2020).
|
|
- **Function**: Cross-party coalition influencing policy, raising awareness, driving legislative change.
|
|
|
|
---
|
|
|
|
## 4. Funding & Financial Flow Map
|
|
|
|
```
|
|
Oak Foundation ──────────────────┐
|
|
Omidyar Network / Luminate ──────┤
|
|
Prudence Trust (£745K) ──────────┤
|
|
Indigo Trust / Sainsbury (£450K)─┼──▶ 5Rights Foundation ──▶ Policy Design (AADC, OSA framework)
|
|
Paul Hamlyn Foundation (£175K) ──┤ │
|
|
Rothschild Foundation (£150K) ───┤ │
|
|
End Violence ────────────────────┘ │
|
|
▼
|
|
Baroness Kidron
|
|
(Founder/Chair)
|
|
│
|
|
Uses 5Rights research in Lords
|
|
│
|
|
▼
|
|
Legislative Amendments
|
|
(OSA, AADC, CWS Bill)
|
|
│
|
|
▼
|
|
Ofcom Enforcement
|
|
│
|
|
▼
|
|
Mandatory Age Verification
|
|
│
|
|
▼
|
|
AVPA Members (Yoti, etc.) profit
|
|
▲ │
|
|
│ ▼
|
|
AVPA lobbies for Market grows
|
|
expanded scope ◀── ($2.5B → $7.1B)
|
|
(VPNs, devices)
|
|
|
|
DPA (1993) ──▶ AV Working Group (2014) ──▶ AVPA (2018) ──▶ Lobbying for VPN age checks
|
|
│ │
|
|
└── Members: Amazon, MindGeek/Aylo, Equifax │
|
|
▼
|
|
Lords Amendment 92 (VPN ban)
|
|
│
|
|
▼
|
|
Lord Nash (proposer)
|
|
- VC / PE background
|
|
- 75 company interests
|
|
- £300K Tory donations
|
|
- £3.8B govt contract links
|
|
|
|
IWF (90% industry funded) ──▶ APPG Secretariat ──▶ Parliamentary influence
|
|
▲ │
|
|
│ ▼
|
|
Meta, Microsoft, Google ─── fund IWF ──── get regulated by APPG-influenced policy
|
|
```
|
|
|
|
---
|
|
|
|
## 5. The Conflict of Interest Loop
|
|
|
|
The investigation reveals a self-reinforcing cycle:
|
|
|
|
1. **Foundation funding**: Wealthy foundations (Oak, Omidyar, Prudence Trust, Indigo/Sainsbury) fund 5Rights Foundation to design policy frameworks.
|
|
|
|
2. **Policy design**: 5Rights creates the intellectual framework for age verification mandates (AADC, OSA principles). Baroness Kidron, as both 5Rights chair and a legislating peer, introduces these frameworks as amendments.
|
|
|
|
3. **Industry formation**: The Digital Policy Alliance's age verification working group spawns the AVPA trade body in 2018, the same year 5Rights is founded and the AADC passes.
|
|
|
|
4. **Legislative expansion**: AVPA members lobby for expanded age verification scope (VPN users, device-level, social media) because each expansion creates new customers.
|
|
|
|
5. **Regulatory enforcement**: Ofcom, led by a former senior civil servant, enforces the mandates, fining non-compliant sites and driving them to purchase AVPA member services.
|
|
|
|
6. **Market growth**: The age verification market grows from $2.5B to a projected $7.1B. Yoti's revenue triples from $14M to $47.9M in two years.
|
|
|
|
7. **Further lobbying**: With growing revenues, AVPA members fund more lobbying for further expansion. The cycle repeats.
|
|
|
|
The IWF adds a secondary loop: funded 90% by the tech industry it helps regulate, while serving as secretariat for the parliamentary group that oversees online safety policy.
|
|
|
|
---
|
|
|
|
## 6. Public Response
|
|
|
|
- Petition to repeal the Online Safety Act gathered 550,137 signatures before closing (October 2025).
|
|
- VPN usage surged 1,400-1,800% following OSA age verification enforcement (July 2025).
|
|
- AVPA reports 5 million additional daily age checks from UK users.
|
|
- Multiple petitions opposing VPN ban (5,095+ signatures and growing).
|
|
- Opposition from Big Brother Watch, Open Rights Group, EFF, Index on Censorship.
|
|
- Celebrity supporters of restrictions: Hugh Grant, Peter Andre.
|
|
|
|
---
|
|
|
|
## 7. Open Questions for Further Investigation
|
|
|
|
1. **Lord Nash's technology investments**: Which of his 75 declared company interests operate in identity verification, age assurance, or adjacent markets?
|
|
2. **AVPA member donations**: Have AVPA member companies or their executives donated to Conservative MPs or Lords who supported the amendments?
|
|
3. **Yoti government contracts**: Full scope of Yoti's UK government contracts and regulatory sandbox participation.
|
|
4. **Prudence Trust**: Who controls Prudence Trust, and what is its connection to the age verification industry? (Largest single donor to 5Rights at £745,500.)
|
|
5. **Ofcom personnel**: Former Ofcom staff now working at age verification companies, and vice versa.
|
|
6. **Cross-border coordination**: Coordination between UK (OSA/CWS Bill), US (KOSA/COPPA 2.0), and Australian (social media ban) lobbying efforts. Shared actors and funding sources.
|
|
7. **MindGeek/Aylo connection**: Former DPA member MindGeek (now Aylo) developed AgeID. What is their current relationship with the AVPA and DPA?
|
|
8. **IWF dual role**: Full mapping of IWF board members' connections to tech companies it is funded by and the APPG it serves.
|
|
9. **Baroness Benjamin's Ofcom tenure**: What age verification or content policies did she influence during her 2003-2006 Ofcom Content Board term?
|
|
10. **Device surveillance mandate**: Which companies would supply "tamper-proof system software"? Who lobbied for this specific amendment?
|
|
|
|
---
|
|
|
|
*Sources: See [sources.md](sources.md) for complete source index.*
|