Is a VPN legal in China? What the regulations say and what enforcement looks like

This is a factual explainer, not legal advice. The short version is that VPN regulation in China distinguishes between licensed commercial VPN operators and unlicensed international consumer VPN services. For foreign travelers and expats, enforcement in practice has historically targeted the domestic supply side, not individual users.

None of this is guaranteed to remain the case, and anyone operating in a sensitive professional context (journalism, legal work, human rights work) should consult their own counsel.

What the regulations say

The 2017 MIIT notice on "cleaning up the unlicensed VPN market" required Chinese telecommunications companies to obtain government licenses before operating VPN services, and targeted unlicensed commercial operators. The notice made no explicit provision for personal-use international VPN apps.

Subsequent notices and regulatory statements have reinforced the licensing regime for domestic VPN providers. No regulation specifically prohibits individual personal use of international VPN apps, but the regulatory posture has been that such use operates in a gray area.

What enforcement has looked like in practice

Enforcement reporting suggests the focus has been:

• Domestic businesses selling VPN service without MIIT license
• Individuals selling VPN accounts commercially from within China
• Rare cases involving content shared via VPN that was separately deemed unlawful

We are not aware of any reported enforcement action against foreign tourists or business travelers for personal use of international VPN apps during short-term stays. The practical risk to an individual traveler using a personal VPN for ordinary purposes (email, messaging, social media, work tools) has been very low historically.

What is different for journalists and sensitive work

Professional contexts where information handled could be independently considered sensitive (journalism on certain topics, human rights work, legal work involving Chinese counterparties) warrant consultation with specialized counsel. A VPN is one layer of operational security; it is not legal cover. See our journalist guide for a layered-security overview.

Regulatory direction

The regulatory posture has tightened in stages over time, primarily through periodic updates to licensing requirements for telecommunications operators and corporate users. For individual travelers, enforcement has stayed focused on the supply side rather than the user side.

This could change. Prudent travelers treat a VPN the way they treat any other piece of personal communications infrastructure: useful, legal in their own country, maintained to a professional standard, and never a substitute for staying on the right side of local law in whatever jurisdiction they are visiting.

What to carry on your phone

There is no requirement for travelers to disclose the presence of VPN apps on their devices. We do not recommend changing behavior in anticipation of such a check; we do recommend the same discipline that applies everywhere: carry only what you need, lock your devices, use full-disk encryption.

Our position

UnblockMeVPN is operated by POD RV LLC, a Hawaii (US) limited-liability company. We are not an MIIT-licensed Chinese operator and we do not operate infrastructure inside mainland China. Our servers sit in Hong Kong, Tokyo, Kyiv, Bucharest, and Los Angeles. Our law enforcement page describes how we handle requests, and our threat model describes what we log and why.