Step 8 of 8 ยท Responsible use
Using a VPN lawfully and responsibly
What changes with where you are, whose network you use and what you agreed to, and the limits of what any VPN can promise. Read this before relying on one.
The law where you are
In many countries, using a VPN for privacy is lawful. Some countries restrict VPNs, allow only approved services, or regulate how they can be used. The rules can also change, and they apply where you physically are, which matters when you travel.
Whatever the law says about VPNs, it still applies to what you do while connected. A VPN does not make an unlawful act lawful.
Workplace and school rules
- Employers and schools set an acceptable use policy for their networks and devices. Many do not allow personal VPNs, often for security reasons.
- On a managed device, use only the software and VPN the organisation provides, as its IT team instructs.
- If you need a VPN for a legitimate reason, such as privacy on your own device during travel, ask the organisation's IT team what is allowed.
- Breaking these rules can have consequences under your contract or your school's code of conduct, even where the VPN itself is lawful.
The terms of the services you use
Websites, apps and subscription services set terms about where and how they can be used, often because of licensing. Some do not allow VPN connections. Using a VPN does not change what you agreed to, and services can close accounts that break their terms. Respect those terms.
The limits of privacy
- A VPN provider operates under the law of its jurisdiction and can be required to keep or hand over data.
- Accounts you sign in to still know who you are.
- A VPN protects traffic in transit. It does not secure your device, your passwords or the sites you use.
What this guide does not cover
VPN Learning explains lawful, everyday use on your own devices. It does not cover, and will not add, instructions for:
- Bypassing network restrictions or monitoring set by employers, schools or governments.
- Evading law enforcement or hiding unlawful activity.
- Accessing accounts, networks or systems without permission, or taking anyone's credentials.
- Getting around the paid terms, regional licensing or account rules of a service.
If a restriction stops something you have a legitimate reason to do, ask whoever set the restriction.
Terms used here
- Acceptable use policy
- The rules an employer, school or network operator sets for using its networks and devices. They often say whether personal VPNs are allowed.
- Managed device
- A laptop or phone administered by an employer or school. Its owner sets the rules, and installing your own VPN on it is usually not allowed.
- Jurisdiction
- The country whose laws apply to a provider. It affects what data the provider can be legally required to keep or hand over.