On 22 July 2026, the Court of Justice of the European Union (CJEU) handed down a ruling that many outlets, including TorrentFreak, TechRadar and TechNadu, framed around a simple question: who is responsible when someone uses a VPN to get around a geographical restriction? The headlines were tempting, and some of them oversimplified. Here is what the ruling actually says, what it changes, and, just as importantly, what it does not.
The case behind the ruling
According to the reporting, the case did not start as a VPN dispute at all. It concerned the online publication of Anne Frank manuscripts and a copyright question tied to that publication. The VPN angle came in because the material was geo-blocked, and the legal issue was whether the rights holder could be held liable for infringement when a determined user reached the content anyway using a VPN.
That framing matters. This was a copyright-liability question about the party publishing the work, not a criminal case about individual VPN users.
What the Court actually decided
The core of the ruling, as reported, is this: as long as a site uses "state-of-the-art" geo-blocking technology, the rights holder is not liable for copyright infringement simply because a user bypasses that restriction with a VPN.
In other words, if a publisher puts up geo-blocking that reflects the current state of the art, it has done enough to meet its obligations. The fact that a technically motivated user can still slip through with a VPN does not, on its own, turn the publisher into an infringer.
The Court's view of VPN providers
The reporting also highlights a second point that is easy to miss. According to the coverage, the Court considered that the VPN provider plays no "indispensable role" in the distribution of the work, and does not itself provide access to the work.
That is a meaningful distinction. A VPN is treated as a general-purpose privacy and networking tool, not as the actor that makes copyrighted content available. The provider routes and encrypts traffic; it is not the one publishing the material or handing out access to it.
What this ruling does not say
This is where the honest caveats matter, because the headlines can run ahead of the text.
- It does not legalise piracy. The ruling is about the copyright liability of the rights holder. It is not a declaration that any and all bypassing is lawful in every circumstance.
- It does not override a service's terms of use. Reaching a streaming catalogue meant for another country can still break that platform's contract with you. At most a provider may limit or block your account, but that is a separate matter from this ruling.
- It does not give you a right to content you are not entitled to. The Court addressed liability, not entitlement.
- It is not a general "VPNs win everywhere" verdict. It is a specific finding on a specific copyright question.
If you want the broader picture on where a VPN sits legally, our guide on whether VPNs are legal in 2026 walks through the general rules, and our explainer on what geo-blocking is covers how these restrictions work in the first place.
Do not confuse it with the LaLiga case
There is a separate story that has been circulating in the same window, and it is important not to mix the two.
In a distinct, national matter, a Spanish court ordered VPN providers, reportedly including NordVPN and Proton VPN, to block certain illegal football streams. That is a blocking order in one country, aimed at specific illegal streams. It is not the same as this EU-wide CJEU ruling on copyright liability. Different court, different country, different legal question. Coverage that blends them together can leave a misleading impression, so treat them as two separate developments.
What actually changes
Read carefully, the practical takeaways from the CJEU ruling are narrow but real:
| Question | What the ruling suggests |
|---|---|
| Is a publisher liable when a VPN bypasses its geo-block? | Not merely because of the bypass, if the geo-blocking is state-of-the-art. |
| Is the VPN provider the one distributing the work? | No indispensable role; it does not itself provide access to the work. |
| Is bypassing geo-blocking now always legal? | No. This is a copyright-liability finding, not a blanket legalisation. |
| Do a platform's terms of service still apply? | Yes. They can still restrict or block your account. |
The clearest effect is legal clarity: publishers that deploy up-to-date geo-blocking have a firmer footing, and VPN providers are, in this reading, not treated as the responsible party for a user's bypass. For everyday users, the honest reading is more measured. The tool is not the villain here, but the ruling is not a green light for anything you do with it either.
Why the distinction is worth keeping straight
It is tempting to reduce a ruling like this to a slogan. The reality is more useful. The Court drew a line around liability and around the role of a general-purpose tool, and it did so in the specific context of copyright and a specific publication dispute. That line is genuinely helpful for publishers and for how VPN providers are characterised. It is not a rewriting of what individual users may or may not do, and it does not touch the entirely separate world of national blocking orders like the Spanish football case.
If you are trying to understand the broader European picture, including the recurring "will the EU ban VPNs" question, our piece on whether the EU is banning VPNs in 2026 puts the fears in context.
The honest takeaway
For a VPN user, the sensible reading of the 22 July 2026 CJEU ruling is this: it reinforces that a VPN is treated as a lawful, general-purpose tool, and that a publisher using state-of-the-art geo-blocking is not liable for copyright infringement just because someone gets around it. That is real clarity, and it is welcome. But it does not legalise piracy, it does not give you rights to content you are not entitled to, and it does not cancel a service's terms of use. And it should not be confused with the separate Spanish LaLiga blocking order. (This article explains what the reporting says about the ruling. It is not legal advice.)
Going further. Related reading: are VPNs legal in 2026, what geo-blocking is and is the EU banning VPNs in 2026.
Secure your connection with NordVPN
Threat Protection blocks trackers & malware · kill switch · 30-day money-back
