Are VPNs Legal in Australia? What the Rules Say

The question usually comes up after something odd happens: Stan shows an error code, a teenager mentions a VPN at dinner, or a work laptop asks you to connect before you can open email. Using a VPN in Australia is ordinary. The Australian Government's own cyber security agency tells people to use one in some situations. What a VPN can't do is change the rules that apply to what you do through it. The facts below were checked on official Australian government pages and the companies' own websites on 30 October 2026.

SecureCheck.com.au is an independent guide operated by Dominet BV. This page is general information, not legal or technical advice for your situation. We don't sell VPNs or security software. No link on this site is an affiliate link right now. We may earn a commission from VPN or security companies in future when a reader buys through a link on this site. If that happens we'll label those links and explain it in our affiliate disclosure, and it won't change the facts we publish. Facts were checked on official and company websites on 30 October 2026. Read our general information notice. If your question is about your own legal position, speak to a qualified lawyer.

The short answer

We found no Australian law in our sources that bans people from using a VPN. The Australian Cyber Security Centre (ACSC), part of the Australian Signals Directorate, goes further: its remote working tips suggest using a reputable VPN provider to hide your activity from others on a network you don't trust.

Three limits sit on top of that:

• The law still applies to what you do. Fraud, harassment or downloading something unlawfully is the same act with or without a VPN.
• Services set their own rules. Streaming services and social media platforms can detect and block VPN connections. That's about your account with them, not a criminal matter, but it can stop you watching or signing in.
• Other countries differ. The ACSC's travel tips say to check local laws before using a VPN overseas, because some countries restrict them.

What the Australian Government says about VPNs

The ACSC's guidance is practical rather than legal. For people working away from the office, it says to avoid public Wi-Fi for sensitive work where possible, and that a VPN can hide your activity from others on the same network. It adds a caution that's easy to miss: a VPN won't protect you from malware, phishing or vulnerabilities in your software.

For travellers, the ACSC's advice is to check the laws of the country you're visiting before you use a VPN there. That's the only point in our government sources where VPN use itself is described as possibly restricted, and it's about other countries.

If your employer gives you a VPN, its rules for using it are part of your employment, not the law. Follow them, and don't install a personal VPN on a work device without asking.

Metadata retention and VPNs

Australia's data retention scheme is set out in the Telecommunications (Interception and Access) Act 1979. According to the Department of Home Affairs' Data Retention Guideline, section 187C requires providers to keep certain metadata for at least two years. Subscriber and account information is kept for the life of the account plus two years.

The scheme doesn't require everything to be kept. Home Affairs' industry FAQs say it excludes the content of communications, and internet access providers don't have to keep the web addresses their customers visit.

Using a VPN doesn't break or dodge this scheme. Your internet provider still keeps what it's required to keep about your connection. What it can see is narrower: mostly that your device connected to a VPN server. Our metadata retention guide explains what's kept in more detail.

Privacy Act protections and where they stop

The Privacy Act 1988, administered by the Office of the Australian Information Commissioner (OAIC), contains 13 Australian Privacy Principles. It covers Australian Government agencies and organisations with annual turnover above $3 million, plus some other organisations.

When you use a VPN, the company running it can see your traffic. So it's worth checking where a VPN company is based and which privacy law it says applies to your data. That information is usually in its privacy policy. If a company doesn't say, treat that as an answer in itself. Our VPN checklist includes this question.

Streaming services and VPNs

Streaming services license shows by country, and each one has its own rule about VPNs. These are terms of service, not laws, but the result for you is the same: the service may refuse to play.

• Stan shows error A26 when it detects you're outside Australia or using a VPN, proxy or custom DNS, because its content is licensed for Australia only (Stan Help).
• Netflix says a VPN can make a device look like it's somewhere else, which can trigger error E106. VPNs aren't supported for live events or ad-supported plans (Netflix Help).

We don't explain how to get around these rules. Our streaming guide sets out what each service says, including ABC iview and SBS On Demand.

The under-16 social media rules

From 10 December 2025, age-restricted social media platforms must take reasonable steps to stop Australians under 16 from having accounts, according to eSafety. eSafety says there are no penalties for under-16s or their parents. The obligation sits with the platforms.

A VPN isn't a reliable way around this. eSafety's industry guidance says platforms may use signals such as IP addresses and other location information to detect when someone is using a VPN to appear to be outside Australia. If you're a parent, the more useful conversation is about why the rule exists, not about the VPN.

Using a VPN when you travel overseas

Rules on VPNs vary widely between countries. Before you leave, check the official travel advice for your destination and any rules your employer has for work devices. The ACSC's travel tips say to check local laws first.

Two practical points for Australians abroad:

• Australian streaming may not work. SBS On Demand says it's only available within Australia, including for Australians travelling overseas. Stan's content is licensed for Australia. A VPN doesn't change those licences.
• Hotel and airport Wi-Fi are shared networks. The ACSC's public Wi-Fi caution applies just as much overseas. Our public Wi-Fi guide has a short routine.

Who can tell you're using a VPN

People often assume a VPN is invisible. It isn't. Your internet provider can see that your device is connected to a VPN server, even though it can't read the traffic inside. Websites and apps can often tell too. Stan says it detects VPNs, proxies and custom DNS, Netflix shows an error when it thinks you're using one, and eSafety says social media platforms may use IP addresses and other location signals to spot them.

None of that is a legal problem. It just means a VPN hides the content of your traffic from the network, not the fact that you're using one. If being seen to use a VPN would cause you trouble, at work, at school or in another country, the VPN won't hide that.

What a VPN won't make legal

A VPN is a tool for privacy on the network. It doesn't change the legal status of anything you do. In plain terms:

• Scams and fraud stay crimes, and so does sending threats or harassment.
• Unlawful downloading stays unlawful.
• Agreements you've signed with a service, an employer or a school still apply.

And if you're the target rather than the user, a VPN won't protect you from a scam. Our online scams guide covers what does help.

Frequently asked questions

Is it illegal to use a VPN in Australia?

We found no Australian law in our sources that bans using one. The Australian Cyber Security Centre suggests a reputable VPN for hiding your activity on networks you don't trust. What you do through the VPN is still subject to the law.

Can I get in trouble for using a VPN with Netflix or Stan?

These are the services' own rules, not criminal laws. The usual result is that the service blocks playback or shows an error, such as Stan's A26 or Netflix's E106.

Does a VPN get around metadata retention?

It doesn't switch the scheme off. Your internet provider still keeps the metadata it's required to keep about your connection. With a VPN on, that record mostly shows a connection to the VPN server.

Can my child use a VPN to get around the under-16 ban?

eSafety says platforms may use IP addresses and other location signals to detect VPN use. There are no penalties for under-16s or parents, but a VPN isn't a reliable way to keep an account.

Can I use a VPN overseas?

It depends on the country. The ACSC says to check local laws before you use a VPN abroad, because some countries restrict them.

Does my work VPN count?

A work VPN is governed by your employer's rules as well as the law. Follow its policy, and ask before installing anything on a work device.