Disclosure: Some links are sponsored. If you try a sponsored VPN, such as PureVPN, we may earn a commission.
Last reviewed: by the Smart Savings Guides editorial team. How we research and update articles.
Yes, using a VPN is generally legal in Australia. Millions of people use them for work, privacy and security on public Wi-Fi. But a VPN doesn't make illegal activity legal, and services you use may have their own rules. Here's what the law means in practice, what your internet provider can still see, and how Australia's data retention scheme fits in.
Key takeaways
- Using a VPN is generally legal in Australia for everyday privacy and security.
- Illegal activity stays illegal, and services' own terms still apply.
- Under the data retention scheme, telcos and internet providers must keep certain metadata for at least two years, but not the content of communications or browsing history.
- With a VPN on, your ISP can generally see that you're using a VPN, but not which sites you visit. The VPN provider can see that instead.
Short answer
Yes, using a VPN is generally legal in Australia for everyday privacy and security. Businesses use VPNs so staff can connect securely to work systems, and individuals use them to protect their connection on public Wi-Fi or to keep browsing private from their internet provider.
What still applies
Illegal activity stays illegal, and services' own terms still apply. Using a VPN doesn't change what's lawful. Copyright infringement, fraud and other offences remain offences whether or not you use a VPN. Streaming services and other platforms may also prohibit VPN use in their terms.
Data retention
Under the mandatory data retention scheme, Australian telcos and internet providers must keep certain metadata (such as account details, IP addresses, and connection times) for at least two years. They aren't required to keep the content of communications or browsing history.
With a VPN on, your ISP can generally still see that you're connected to a VPN and how much data you use, but not which sites you visit. The VPN provider can see that instead.
What different parties can see
| Who | Without a VPN | With a VPN |
|---|---|---|
| Your internet provider | Domains you visit (not page content on HTTPS sites), data used | That you're using a VPN, data used, connection times |
| Websites you visit | Your IP address and approximate location | The VPN server's IP address |
| The VPN provider | Nothing | Your IP address and potentially the sites you visit, depending on its logging policy |
| Public Wi-Fi operator | Domains you visit | Only that you're connected to a VPN |
Choosing a VPN you can trust
Since a VPN shifts visibility from your ISP to the VPN provider, trust matters. Look for: - a clear no-logs policy, ideally backed by an independent assessment - a transparent company with clear contact details - modern protocols such as WireGuard or OpenVPN - apps from official app stores
Common misconceptions
- "A VPN makes me anonymous." Not completely. You're still identifiable through accounts you log into, cookies and the VPN provider itself.
- "VPNs are only for hiding illegal activity." No. Many legitimate uses exist, from remote work to public Wi-Fi security.
- "Free VPNs are just as good." Some free VPNs limit speed or data, and some have been criticised for collecting and sharing data.
VPNs at work
Many employers require a VPN to connect to their systems. Follow your employer's policies, and don't install a personal VPN on a work device without permission.
Travelling overseas
VPN laws differ by country. Some countries restrict or ban VPN use. If you're travelling, check the Smartraveller advice for your destination before relying on a VPN.
Step by step: use a VPN responsibly
- Choose a reputable provider with a clear privacy policy.
- Install its official app from the App Store, Google Play or its website.
- Connect to an Australian server for everyday use.
- Follow the terms of services you use.
- Keep the app updated.
Do you need one?
For many people at home, a VPN is optional. See do you need a VPN at home?. For public Wi-Fi, it can add a useful layer of protection. See VPNs on public Wi-Fi.
Can police or agencies still access data?
Australian law enforcement and security agencies can access retained metadata under the data retention scheme, and can seek warrants for content in certain circumstances. A VPN changes what your ISP sees, but agencies may still request information from VPN providers, depending on where the provider is based and what it keeps. That's why a provider's logging policy matters.
Frequently asked questions
Are VPNs legal in Australia?
Yes. Using a VPN is generally legal in Australia for privacy and security. Illegal activity remains illegal, and services' own terms still apply.
Can my internet provider see I'm using a VPN?
Generally, yes. Your ISP can usually see that you're connected to a VPN and how much data you use, but not which sites you visit.
Does Australia's data retention law cover browsing history?
No. Providers must keep certain metadata, such as account details, IP addresses and connection times, for at least two years, but not the content of communications or browsing history.
Is it legal to use a VPN for streaming in Australia?
Using a VPN isn't illegal in itself, but streaming services' terms may prohibit using one to access other regions' content, and they may block VPNs.
Sources
Official sources this article relies on, checked October 15, 2026. Rules and prices change, so confirm details at the source.