VPN legality explained country by country, from the text of the law rather than from headlines. We name what each rule actually targets — the tunnel, the provider, your conduct or nothing at all — and say plainly where sources disagree.
Three jurisdictions we have covered put the duty on companies. China is the one where the text reaches the person at the keyboard — and the frightening 2026 numbers come from a draft, not a law.
The two-million-dirham fine everyone quotes belongs to a different offence, and it requires two elements rather than one. The regulator itself confirmed VPNs are lawful a decade ago.
No Indian law criminalises using a VPN, and the 2022 CERT-In rule is aimed at providers rather than subscribers. District orders in Jammu and Kashmir are the exception nobody mentions.
Using a VPN is not a crime in Turkey. Law 5651 obliges internet providers to block access, and penalties attach to the underlying act rather than to the tunnel itself.
Legal in most of the world, restricted in about a dozen countries, banned outright in two. And in several places where personal VPNs are illegal, corporate ones are not — which tells you what the rules are really about.
