DISCLAIMER: While this guide has been thoroughly researched, we are not legal professionals. If you wish to clarify VPN legality or the specific laws of any country, seek professional legal advice.
Virtual private networks (VPNs) are legitimate tools used to protect your online privacy and security.
VPNs are legal to use in most countries, however in this guide we’ll detail where VPNs are legal and illegal. We’ll also look at VPN laws in the 10 countries where VPNs are restricted.
We investigated the VPN laws of 190+ countries to find out where VPNs are legal. We found that:
- VPNs are legal to use in most countries around the world, including the US and UK.
- VPNs are illegal in Belarus, Iraq, North Korea, and Turkmenistan.
- VPN use is restricted in an additional six countries, including China and Russia.
- 17 countries allow VPN use but have noteworthy digital rights restrictions.
Using a VPN is legal in most of the world, however your activity while using the VPN is still subject to the laws of the country you’re located in. It’s still possible for law enforcement to demand information stored by your VPN provider. Ultimately, illegal activity is still illegal.
Where Are VPNs Legal?
VPNs are legal in almost every country in the world, including the USA, UK, Canada, Australia, New Zealand, and most of Europe. However, you are still subject to the laws of the country you’re located in – not the laws of the country you’ve routed your internet connection through.
This means that any illegal online activity is still illegal when you’re using a VPN – regardless of the server you’re connected to.
It can be confusing when VPN services offer servers in countries where VPNs are illegal or restricted. ExpressVPN, for example, allows users to connect to VPN servers in Belarus and Turkey.
Using these VPN servers is perfectly legal as long as you’re not physically located in one of the 10 countries mentioned above.
This is because VPN services can use virtual server locations. These servers are not actually located in the country they’re labelled with.
For instance, ExpressVPN’s Belarus and Turkey servers are both physically located in the Netherlands, where VPNs are legal.
Unfortunately, not all VPNs are created equal, and not all VPNs are safe. Once you’ve determined that VPNs are legal in your country, you should also consider other factors that might impact your online safety.
These factors might include your VPN service’s jurisdiction, logging policy, and security offering. Your country’s approach to digital rights is also worth being aware of, even if VPN use is legal.
Where Are VPNs Illegal or Restricted?
VPNs are illegal in Belarus, Iraq, North Korea and Turkmenistan. The use of VPN services is heavily restricted in China, Iran, Oman, Russia, Turkey, and the UAE.
The countries in the table below are labeled according to the severity of their VPN laws and restrictions. ‘Extensive’ is the strictest level of restriction, followed by ‘moderate’ and ‘minor.’
|Country||VPN Law||Social Media Blocks||Censorship||Surveillance|
Here is a more detailed list of VPN laws in the 10 countries where VPNs are either illegal or restricted:
VPNs are illegal in Belarus.
Belarus bans VPNs as it sees them as a method to undermine the law. In February 2015, the country’s Communications Ministry ruled against the use of anonymized services like VPNs.
Tor, which enables anonymous communications and access to the Dark Web, has also been blocked in Belarus since 2016.
It’s still unclear whether the government can actually contain the expanding VPN market. For the moment, there is an unspecified fine for anyone caught using a VPN in Belarus.
Only government-approved VPNs are legal in China.
VPNs are technically legal in China. However, all VPN services have to gain approval from the Chinese Communist Party (CCP) before they are allowed to operate in the country.
This often involves agreeing to conditions such as data logging, which makes the VPN pointless from a privacy perspective.
While there are suggestions that China might soon open up the VPN industry to foreign investment, using a VPN ‘without authorization’ can currently result in fines of up to 15,000 yuan (roughly $2,200).
Despite this, many people still wish to use a VPN in China. If this applies to you, read our article on the best VPNs for China, since most VPN apps will not work.
Only government-approved VPNs are legal in Iran.
Iran has been blocking unsanctioned VPNs since 2013, while state-sanctioned VPNs are monitored heavily.
The penalty for using a VPN that isn’t sanctioned by the Iranian government is up to one year in prison.
VPNs are illegal in Iraq.
VPNs have been banned in Iraq since 2014. The government claims this ban is to keep terrorist organizations from influencing the public via social media.
Iraqi government officials still use VPNs, despite there officially being ‘no exceptions’ to the rule.
5. North Korea
VPNs are illegal in North Korea.
North Koreans aren’t allowed to access foreign media, so it’s not surprising that VPNs are illegal.
The penalty for VPN use is unknown as North Korea is so secretive.
The country’s internet is also heavily censored, and foreign diplomats are prohibited from using it.
Only VPNs permitted by the Sultanate are legal in Oman.
Since 2010, Oman has banned all VPNs except those permitted by the Sultanate. These exceptions only apply to corporate VPN services, which have to apply for authorization.
All approved corporate VPN providers must keep web usage logs.
Personal VPN use is illegal in Oman to prevent citizens from bypassing censorship. Attempting to circumvent these laws is punishable with a fine of $1,300.
Only government-approved VPNs are legal in Russia.
Russia has banned unapproved VPNs to prevent access to ‘unlawful content’. Russian ISPs enforce the ban by blocking websites that offer VPN services.
In September 2021, the Roskomnadzor banned ExpressVPN, NordVPN, IPVanish VPN, Hola VPN, KeepSolid VPN Unlimited and Speedify VPN.
The punishment for using an unapproved VPN in Russia is 300,000 RUB ($5,100) for the user and 700,000 RUB ($12,000) for the service provider.
If you’re traveling to Russia and need to use a VPN, we recommend you see our recommendations for the best VPNs for Russia.
VPNs are legal in Turkey, but their use is restricted.
The Turkish government have been restricting VPN use since 2016, justifying the crackdown as necessary to protect national security and to ‘fight terrorism’.
10 VPN providers were blocked in Turkey in 2016, alongside the Tor Network. As watchdogs in Turkey have noted, it is often people critical of the government who end up being penalized and censored by authorities.
If you need a VPN before visiting, see which VPNs still work in Turkey.
VPNs are illegal in Turkmenistan.
Turkmenistan banned VPNs in 2015 to censor foreign media. All proxies and VPN services are detected and blocked by Turkmenistan’s state-run ISP, Turkmenet.
Turkmenistan’s internet is deliberately overpriced to discourage people from using it. A monthly subscription costs $213 for 8Kbps — more than the country’s average monthly salary.
Using a VPN in Turkmenistan can bring an unspecified fine and an intimidating summons from the Ministry of National Security to have a “preventative conversation”.
10. United Arab Emirates (UAE)
Only government-approved VPNs are legal in the UAE.
The United Arab Emirates only permits the use of government-approved VPNs. This was enforced in 2012, during the Arab Spring.
Banning unapproved VPNs was done to discourage the use of VoIP services like Skype, WhatsApp, and Facebook.
The blocking of VoIP services in the UAE was for both economic and political reasons. It aims to encourage local residents to pay the (expensive) subscription fee for local telecom services, Etislat and Du.
Corporate entities, however, are able to use VPNs unrestricted.
If a VPN is used to commit a crime in the UAE, the user could face prison or a fine of between AED 150,000 (roughly $41,000) and AED 500,000 (roughly $136,000).
For those in need of a VPN before traveling to the UAE, check our list of VPNs that are safe to use in the UAE.
While using a VPN is technically legal throughout all of India, there have been instances of VPN ‘blocking’ in the northern region of Kashmir and Jammu.
In August 2019, the Indian government began restricting internet use in Kashmir. It began with a complete communications blackout, which was followed by a “whitelist” of a small number of websites. Many residents turned to VPNs to help bypass these website blocks
After a video of separatist leader Syed Ali Shah Geelani emerged on social media in February 2020, police have begun taking action against VPN users.
Anyone suspected of using a VPN to spread secessionist ideals is being called in for questioning. There are reported cases of soldiers forcefully searching people’s phones for VPN apps. If found, they have deleted the app, confiscated the phone, or even beat the owner.
According to Indian law, it is still perfectly legal to use a VPN in Kashmir. Most ‘offenders’ are being booked for “misuse of social media” rather than for using a VPN.
With that said, we would advise extreme caution when it comes to using a VPN in Kashmir. It is not worth taking the risk whilst authorities continue to work on the assumption that anyone using a VPN is committing a crime.
The Pakistan Telecommunications Authority (PTA) originally set a deadline of June 30th 2020 for citizens to register their VPN connections with the government. After this date, any unregistered VPNs were supposed to be blocked.
This deadline was then postponed until 31st July 2020, and then again to 30th September, “in order to facilitate businesses & the public”.
According to the PTA, the law is in line with regulations which state that “any mode of communication that becomes hidden or encrypted” requires appropriate registration.
It is unclear what the consequences of using an unregistered VPN in Pakistan will be. However, the PTA has stated in a press release that “action will be taken only against unauthorized VPNs for terminating illegal traffic which causes loss to the national exchequer.”
Pakistani authorities have previously blocked popular websites such as YouTube, Facebook, and Wikipedia. Connections to platforms such as Twitter, Periscope, and Zoom have also been throttled in the past.
It remains to be seen how strictly commercial VPN users will be targeted after the ruling is enforced, but we advise caution. We’ll be monitoring the situation and will update this page when there are developments.
UPDATE: As of September 2021, there has been little word from the PTA regarding the VPN ban. Currently, it seems to apply only to businesses and not to individuals.