1 in 6 VPNs Track Your Location, According to New Report From Proton
Utah's Senate Bill 73 takes effect September 3, 2026, making it the first US law to target VPN use for age verification. The law applies to anyone physically located in the state. Top providers including NordVPN and AdGuard oppose the legislation, citing risks to digital rights. This regulatory shift occurs alongside a Proton investigation revealing that 85% of US mobile VPN apps contain third-party trackers that collect device IDs, network data, and location for ad-tech infrastructure. Additionally, congressional analysis suggests foreign spies can trace users by comparing encrypted traffic at VPN servers.
What changed
Utah's age verification law officially took effect today despite opposition from major providers.
Live updates
-
Utah Age Verification Law Targets VPNs as Privacy Risks Mount
Utah's Senate Bill 73 takes effect September 3, 2026, making it the first US law to target VPN use for age verification. The law applies to anyone physically located in the state. Top providers including NordVPN and AdGuard oppose the legislation, citing risks to digital rights. This regulatory shift occurs alongside a Proton investigation revealing that 85% of US mobile VPN apps contain third-party trackers that collect device IDs, network data, and location for ad-tech infrastructure. Additionally, congressional analysis suggests foreign spies can trace users by comparing encrypted traffic at VPN servers.
Why it matters
VPNs are typically used to mask identity and location, but recent findings suggest many providers fail to protect user data. The Utah law represents a shift toward state-level mandates that could force VPNs to compromise anonymity for legal compliance.
What is confirmed
- Utah's Senate Bill 73 takes effect September 3, 2026, as the first US law targeting VPN use for age verification.
- Proton found that 85% of mobile VPN apps in US app stores contain third-party trackers.
- NordVPN and AdGuard oppose Utah's age verification legislation.
Still unconfirmed
- Foreign spies can trace users by comparing encrypted traffic entering and leaving a VPN server.
- The compliance framework for Utah's law cannot function as written.
What to watch next
- Court rulings on the legality of SB 73
- NSA updates regarding VPN spying risks
- Response from other US states regarding similar age verification laws
confidence 90%Sources used for this update (7)
- apnews.com — Scams in the US are at a record high. Yet most victims get no help and some end up losing even more
- gizmodo.com — You installed a VPN to hide from trackers. 85% of them are trackers.
- www.nextgov.com — Senator asks NSA to update Americans about VPN spying risks
- www.cnet.com — ‘Dark Matter’ Season 2 Release Schedule: When to Watch Apple’s Twisty Sci-Fi Thriller
- www.cnet.com — ‘Supergirl’ Release Date: When You Can Stream the DC Studios Movie
- tech.yahoo.com — Utah becomes the first US state to target VPNs with a strict age verification law, but top providers refuse to budge
- www.techspot.com — Utah just became the first state to target VPN users for age verification
-
Utah VPN Law Takes Effect Amid Privacy Concerns
Utah's Senate Bill 73 takes effect September 3, 2026, marking the first US law to explicitly target VPN use for age verification. The law follows a court injunction triggered by Aylo, the parent company of Pornhub, which paused the original May rollout. NordVPN and other major providers oppose the legislation, with NordVPN claiming the compliance framework cannot function as written. This legal shift coincides with previous Proton findings that 85% of US VPN apps contain trackers and 1 in 6 track user location.
Why it matters
VPNs are designed to shield user identity and activity from surveillance. The Utah law introduces a legal mechanism to bypass or regulate this anonymity for age-restricted content. This creates a conflict between state mandates and the core privacy function of VPN services.
What is confirmed
- Utah's Senate Bill 73 takes effect on September 3, 2026.
- Senate Bill 73 is the first US law to explicitly target VPN use regarding age verification.
Still unconfirmed
- NordVPN claims the Utah law is a compliance framework that cannot function as written.
- Aylo, the parent company of Pornhub, challenged the law and secured a court injunction that paused the May rollout.
What to watch next
- Court rulings on the legality of Senate Bill 73
- Compliance responses from major VPN providers after September 3
confidence 100%Sources used for this update (7)
- la.eater.com — All the New Restaurant Openings to Know in Los Angeles
- www.cnet.com — ‘Ted Lasso’ Season 4: When to Watch New Episodes on Apple TV
- gizmodo.com — The first US law targeting VPN use takes effect September 3: here’s what happens
- www.thedailybeast.com — Gang Leader Accused of Tupac Murder Learns His Fate
- www.cnet.com — ‘Reacher’ Season 4: When to Watch New Episodes on Prime Video
- www.cnet.com — ‘The Shards’: When to Watch New Episodes of Ryan Murphy’s Stylish ’80s Drama
- uk.pcmag.com — The Best VPN Services for 2026
-
Proton Report Finds 85% of US VPN Apps Contain Trackers
Proton warns that millions of US users are risking their privacy because 85% of VPN apps downloaded in the US contain trackers. While some reports highlight that 1 in 6 VPNs specifically track user location, the broader finding suggests a widespread presence of tracking technology within these privacy tools. This contradicts the primary purpose of VPNs, which is to shield user identity and activity from surveillance.
Why it matters
VPNs are designed to encrypt internet traffic and hide IP addresses to prevent tracking. The discovery of integrated trackers suggests that many services may be collecting the very data they claim to protect.
What is confirmed
- Proton found that 85% of VPN apps downloaded in the US contain trackers.
- Proton warns that millions of VPN users in the US are inadvertently risking their privacy.
Still unconfirmed
- 1 in 6 VPNs track user location.
- Chinese apps are secretly spying on millions of iPhone and Android users without warning.
What to watch next
- Identification of specific VPN providers containing trackers.
- Response from VPN companies named in the Proton report.
confidence 90%Sources used for this update (6)
- CNET — 1 in 6 VPNs Track Your Location, According to New Report From Proton
- TechRadar — Millions of VPN users in the US are inadvertently putting their privacy at risk, Proton warns
- Yahoo News Canada — ‘No Warning’—The Chinese Apps Secretly ‘Spying On Millions’ Of iPhone And Android Users
- CyberInsider — Proton finds 85% of US-downloaded VPN apps contain trackers
- Gadget Review — 85% of VPN Apps May Be Tracking You, Proton Says
- www.cnet.com — Fastest VPN of 2026: Improve Your Privacy Without Sacrificing Speed