“relevant VPN service” means a service of providing, in the course of a business, to a consumer, a virtual private network for accessing the internet;

My kid doesn’t use a VPN. I’m the one that routes all our home traffic through a VPN. I’m not a business providing service to my child. The VPN service I use doesn’t provide service to my child. Does this scenario count?

Reading through the regulation, there are so many holes it may as well be swiss cheese. It’s just going to impact VPN businesses, as far as I can see.