Three things shape the picture:
- Since 2015, telecommunications providers have been required to retain metadata for two years: who connected to whom, when, from where and for how long. The content of the traffic is not kept, but the pattern of it is, and a long list of agencies can request access.
- Piracy sites are blocked by court order under the Copyright Act rather than by any government list. Rights holders apply, a judge decides, and providers implement it, which is why blocking here is slow, public and documented.
- Since 10 December 2025, platforms have been required to keep under-16s off social media, and they verify age at the account level.
What a VPN does change is narrower and easier to state. Your provider records an encrypted connection to a single server instead of a map of everywhere you went, and websites see the country you connected from. As anywhere else, that changes what is visible rather than what is permitted.











































