Legal aspects of VPNs in Russia: what is prohibited and what is not
Russian VPN legislation does not introduce a general ban on using VPN services. Specific actions are prohibited — primarily providing tools to bypass blocks for resources in the register of prohibited websites, and popularizing such tools. A VPN itself is a technology, and the law does not separately classify its use as a violation.
This article is a neutral overview of what is directly written in the law. It is not legal advice. For a specific situation, it is recommended to check with a lawyer: enforcement in this area changes, and the consequences for businesses can be serious.
Below we will go point by point: which rules are in force, what they prohibit, what they do not prohibit, and where the boundary lies for users and businesses.
In brief
- Law 276-FZ (2017) prohibits providing tools to bypass blocks for prohibited resources.
- There is no direct ban in the law on an individual using a VPN for good-faith purposes.
- Since March 2024, Roskomnadzor Order No. 196 has been in force, banning the popularization of tools for bypassing blocks.
- Accessing prohibited resources through a VPN is access to prohibited material, with its own legal classification.
- The law regulates business VPNs for corporate tasks more mildly.
- This article is not legal advice — for a specific case, contact a lawyer.
What the law says: key rules
VPN regulation in Russia is based on several connected rules. They work together, and it is important to distinguish between them.
Law 276-FZ of July 29, 2017
It amended the law “On Information.” It prohibited owners of VPN services, proxies, and anonymizers from providing access to resources included in the Unified Register of Prohibited Information. A service that has not connected to the FGIS RKN and does not block access to prohibited websites is itself subject to blocking. The rule is aimed at service operators, not end users.
Law 90-FZ of November 1, 2019 (“sovereign Runet”)
It created the legal basis for installing TSPU at telecom operators. It does not criminalize the fact of using a VPN service, but it created the technical infrastructure through which part of VPN traffic is actually blocked.
Roskomnadzor Order No. 196 (entered into force on March 1, 2024)
It specified the criteria for “information about methods of bypassing blocks” — what exactly is considered popularization of bypass tools. A detailed analysis of the order was published in Garant news. The user is not directly covered by this order — the rule is aimed at publishing public content.
What Roskomnadzor itself says
In a number of official comments, representatives of the agency have emphasized that use of a VPN by an individual for good-faith purposes is not an independent violation. This is the regulator’s position, not a rule of law; if the interpretation changes, enforcement may also change.
What is prohibited and what is not
| Action | Legal status | Source of the rule |
|---|---|---|
| Use of a VPN by an individual for good-faith purposes | There is no direct ban in the law | RKN’s position in public comments |
| Providing a VPN service without connecting to FGIS RKN | Prohibited; the service is subject to blocking | 276-FZ |
| Using a VPN to access prohibited information | Access to prohibited material has its own classification | 149-FZ, Code of Administrative Offences |
| Advertising and popularizing tools for bypassing blocks | Prohibited since March 1, 2024 | RKN Order No. 196 |
| Neutral mention of VPNs in a news context | Not covered by the ban on popularization | RKN Order No. 196 (exceptions) |
| Corporate VPN for business tasks | Regulated more mildly, subject to compliance with communications rules | Law “On Communications” |
How to check right now
When the issue is the availability of a specific website or service, it is much more useful to look at technical facts than at legal interpretation. Freedom Checker shows which websites and services are actually available through different operators at the moment, and whether traces of blocking are visible in the network.
The text of Law 276-FZ itself is available in ConsultantPlus — for those who want to work with the primary source.
What is allowed and what is not: a practical breakdown
The law distinguishes three levels: the user, the service operator, and the distributor of information. The user is primarily covered by the general regulation of access to prohibited information; there is no targeted ban in the law on using a VPN as such.
A VPN service operator is subject to the obligation to connect to FGIS and block access to resources in the register. A distributor of information is subject to RKN Order No. 196 on popularization. These regulations operate independently and may apply to different subjects at the same time.
What to pay attention to
- Law 276-FZ is aimed at service operators, not users.
- Order No. 196 is aimed at public content about bypass tools, not personal use.
- Access to prohibited content has its own classification regardless of the access method.
- Corporate VPNs are regulated separately — primarily by communications rules.
- Enforcement in this area is regularly clarified — follow current explanations.
- This article is an overview of open rules, not advice. For a specific case, contact a lawyer.
- The technical fact of “available/unavailable” can be checked — a specialist should provide the legal classification.
Conclusion
Russian VPN legislation regulates three different subjects: service operators, the distribution of information about bypass tools, and access to prohibited content. There is currently no general ban in the law on an individual using a VPN, but this does not mean “everything is allowed” — specific scenarios may be classified under different rules.
If the question is practical and concerns business or publications, it is worth consulting a lawyer. This article provides reference points, but does not replace a legal opinion.