VPN legality explained country by country, from the text of the law rather than from headlines. We name what each rule actually targets — the tunnel, the provider, your conduct or nothing at all — and say plainly where sources disagree.
A year of headlines said Britons were using VPNs to dodge a law. The law was never addressed to them, and in July 2026 a minister said so in Parliament — while quietly moving the problem somewhere more interesting.
Indonesia blocks services for missing paperwork rather than for what they publish. That mechanism reaches any operator with users here, which raises a question about your provider that nobody asks out loud.
For thirty-nine days in 2024, using a VPN to reach one specific website carried a daily penalty worth most of a year’s average income. Nobody appears to have paid it, and the provision that allowed it was never the part withdrawn.
Three jurisdictions we have covered put the duty on companies. China is the one where the text reaches the person at the keyboard — and the frightening 2026 numbers come from a draft, not a law.
The two-million-dirham fine everyone quotes belongs to a different offence, and it requires two elements rather than one. The regulator itself confirmed VPNs are lawful a decade ago.
No Indian law criminalises using a VPN, and the 2022 CERT-In rule is aimed at providers rather than subscribers. District orders in Jammu and Kashmir are the exception nobody mentions.
Using a VPN is not a crime in Turkey. Law 5651 obliges internet providers to block access, and penalties attach to the underlying act rather than to the tunnel itself.
Legal in most of the world, restricted in about a dozen countries, banned outright in two. And in several places where personal VPNs are illegal, corporate ones are not — which tells you what the rules are really about.
