There's been a number of people touting the idea of a VPN ban, but worth noting it isn't really possible, for multiple reasons.
First and foremost, many public sector agencies utilize VPNs themselves, datacenters with international customers are using them, and critical infrastructure also uses a variety of VPN technologies.
Therefore any proposed ban would be superficial or performative at best, likely primarily targeting domestic VPN providers.
Even regulating those would prove problematic though. Exceptions would be made for commercial/business/corporate use, and domestic providers could pivot around that. At best they may be able to force UK based providers to require ID, but plenty of international providers already ignore UK government demands and will continue to do so - a market which will then only grow. There's other tactics they could use (pressuring providers to block VPN endpoints, etc) but that won't be a problem long term either. This is before we've even gotten into alternative methods/protocols like nostr.
VPN bans in China/Iran had some efficacy (but still relatively easy to circumvent) due to the fact they have the national firewall, complete with DPI (deep packet inspection). UK would never be able to replicate this due to our positioning as a global comms hub & existing infrastructure. A very different environment.
Labour MPs might rattle on about banning it - but none of it will be based in reality. Just performative nonsense from people that use the internet through either an intern or an iPad. Hence why even the existing legislations they have introduced are laughably easy to circumvent, and why you now have Meta asking questions and giving recommendations that should have been obvious from the start (which is another indicator that the UK gov simply wouldn't have a clue on how to implement a VPN ban).
here's what will happen.
- u16 ban passes, platforms must verify all ages
- kids use VPNs, government bans VPNs
- age verification infrastructure already exists, its scope gets broader, more invasive, more extreme
- Online Safety Act forces backdoors into encrypted messaging, E2E encryption dies, gov can read everything you ever send
- CBDC rolls out, your internet passport and financial passport become the same document
- anonymous accounts posting "wrongthink" are now identifiable prosecutable
- the generation that grows up with this doesn't remember it being any other way
- George Orwell was right about everything
- it's over