Are VPNs legal in Belgium? The law, and the blocking fight that reached the world's DNS resolvers
The previous version of this page talked about Belgian data retention and streaming in general terms and cited nothing. This version replaces it, because Belgium earned a real reference page: between 2025 and 2026 it became, after France, the main battleground over whether a national court can force the world's public DNS resolvers, Google's 8.8.8.8, Cloudflare's 1.1.1.1 and Cisco's OpenDNS, to censor their answers country by country. Cisco's reply was to switch OpenDNS off for Belgium entirely, twice.
What people bring to this page is one question in a few forms: is a VPN legal in Belgium. The short answer is yes, without qualification. The longer answer is worth setting out rule by rule, because Belgium blocks a lot, and the way it blocks explains why the question keeps being asked. Every row below carries its source.
Are VPNs legal in Belgium?
Yes. Using a VPN is legal in Belgium, selling one is legal, and no Belgian statute places any duty on the person using one. Belgium blocks websites through court orders and an administrative fast track aimed at intermediaries, and none of those instruments restricts the person using a VPN. Here is where each rule actually sits.
| Question | The rule in Belgium | Statute or decision | Source |
|---|---|---|---|
| Is using a VPN legal? | Yes. No statute restricts it, for residents or visitors, and no fine for VPN use exists. | None applies to the user. | ICT Legal Guide Belgium |
| Do VPN providers have duties? | No. Belgian blocking orders are addressed to internet access providers and, since 2025, public DNS resolvers. No published order names a VPN provider, in contrast with Italy and France. | Code of Economic Law blocking procedures; April 2025 Brussels order | TorrentFreak |
| How long is traffic data retained? | Six, nine or twelve months depending on local crime rates, under a "targeted" regime triggered by geography and threat level, after two bulk-retention laws were annulled. | Law of July 20, 2022 | ULiège, ORBi, EuroISPA |
| Is that retention law settled? | No. The Constitutional Court upheld most of it in 2024 but referred questions to the EU Court of Justice, and on September 3, 2026 Advocate General Szpunar concluded EU law precludes several of its rules without genuine separation of data categories. | Case C-661/24, Académie Fiscale and Others | CJEU press release, GovInfoSecurity |
| Who blocks pirate sites? | Courts on rights holders' claims since 2011, and since June 2024 a fast-track procedure at the FPS Economy whose mandates reach mirror sites. 147 streaming sites were disabled in its first year. | Code of Economic Law, Article XVII.34/1, in force June 1, 2024 | Advanced Television, Broadband TV News |
| Can gambling sites be blocked without a judge? | Yes. The Gaming Commission keeps an administrative blacklist that Belgian providers must DNS-block: 985 domains by September 17, 2026, growing since its first entries of February 8, 2012. | Gaming Act of May 7, 1999, as amended | Belgian Gaming Commission |
| Are public DNS resolvers forced to block? | Yes, since April 2025. Google, Cloudflare and Cisco must stop resolving listed pirate domains for users in Belgium. The duty survived their challenge on August 20, 2026. | Order of the French-speaking Business Court of Brussels, April 2025, upheld August 20, 2026 | TorrentFreak, GIGAZINE |
| Can a viewer be punished? | Not by any administrative fine scheme like Italy's, and no viewer prosecutions have been reported. But the criminal law is not empty: the FPS Economy warns that buyers of illegal IPTV subscriptions risk the same penalties as sellers if prosecuted, and says it has identified over 115,000 subscribers. | Code of Economic Law penalty provisions | Bladi |
Every obligation in that table lands on an intermediary: an access provider, a DNS resolver, a host. Not one row makes the person using a VPN do anything or risk anything, and Belgium has never gone where Italy went, down the chain to the viewer. The other thing the table shows is Belgian persistence: when DNS blocking at the ISPs stopped working because people switched to public resolvers, Belgian courts followed France's May 2024 lead and put the public resolvers themselves under a standing order, then defended it on appeal.
What has Belgium actually blocked since 2011?
The chronology below is the record I could document, from the first Pirate Bay order to the resolver fight. It matters for the VPN question because every instrument on the list works at the DNS or network level inside Belgian infrastructure, which is exactly the layer a VPN tunnel does not touch.
| Date | What happened | Source |
|---|---|---|
| July 8, 2010 | The first-instance court in Antwerp rejects the Belgian Anti-Piracy Federation's demand that Telenet and Belgacom block The Pirate Bay, calling it disproportionate. | Stanford WILMap |
| September 26, 2011 | The Antwerp Court of Appeal reverses: both providers must DNS-block 11 Pirate Bay domains within 14 days, on pain of 1,000 euros per day. It is Belgium's first site-blocking order. | Lexgo, EDRi |
| October 2011 | The blocks go live and are immediately shown to be shallow: The Pirate Bay resurfaces for Belgian users on a fresh domain within days. | TorrentFreak |
| February 8, 2012 | The Gaming Commission's blacklist of unlicensed gambling sites gets its first entries. Belgian providers must block the listed domains. | Belgian Gaming Commission |
| April 22, 2021 | The Constitutional Court annuls the 2016 bulk data retention law, its second annulment after 2015, applying the EU Court of Justice's case law against general and indiscriminate retention. | Hunton |
| July 20, 2022 | Parliament passes the third retention law: traffic data kept up to 12 months, triggered by geographic zones and threat levels rather than kept for everyone unconditionally. | EDRi |
| June 1, 2024 | The FPS Economy's fast-track blocking procedure, created by the law of June 19, 2022, takes effect: administrative mandates that also cover mirror sites, with a dedicated anti-piracy unit. Nineteen intermediaries comply, within 48 hours to a week. | ICT Legal Guide Belgium, Broadband TV News |
| June 28, 2024 | Meanwhile in France, the world's first blocking orders against public DNS resolvers, obtained by Canal+ in May 2024, push Cisco to suspend OpenDNS for France and Portugal. Belgium is watching. | TorrentFreak |
| September 26, 2024 | The Constitutional Court's third retention ruling upholds most of the 2022 law but refers questions to the EU Court of Justice. Belgian providers point to technical challenges and legal uncertainty. | EuroISPA, ISPA Belgium |
| Late March 2025 | On a claim by sports broadcaster DAZN and 12th Player, the Brussels business court orders about 140 pirate streaming domains blocked, and addresses the order not only to ISPs but to the public DNS resolvers of Google, Cloudflare and Cisco, under threat of 100,000 euros per day. Over the life of the order the blocklist grows from 58 to 258 domains, with weekly updates of up to 100. | TorrentFreak, TorrentFreak |
| April 11, 2025 | Cisco withdraws OpenDNS from Belgium entirely rather than build country-specific filtering, telling users the service is unavailable due to a court order. | TorrentFreak |
| May 2025 | The three resolvers respond differently: Google rejects the queries, Cloudflare serves an error page, OpenDNS is simply gone. Each approach leaks different amounts of information to the user about why. | TorrentFreak |
| June 2025 | The FPS Economy reports 147 illegal streaming sites disabled in the fast-track procedure's first year. | Advanced Television |
| July 2025 | The court suspends the resolver duty for Cisco pending its final ruling on the challenge. OpenDNS returns to Belgium. | TorrentFreak |
| November 2025 to February 2026 | The next wave of blocking orders, for Hollywood studios, Netflix and Apple against pirate streaming brands, and for RTL and RTBF against five illegal IPTV services, binds ISPs, Cloudflare and Google as intermediaries but spares their DNS resolvers while the resolver litigation runs. | TorrentFreak, TorrentFreak, TorrentFreak |
| August 20, 2026 | The presiding judge of the French-speaking Business Court of Brussels dismisses the core of the challenge by Google, Cloudflare and Cisco: resolver blocking is technically possible and its cost was not shown to be disproportionate. Penalties are eased to 100,000 euros per day only on match days, capped at 20 million euros per company, with three months to comply. Cisco, saying selective blocking would harm OpenDNS's performance, stability and security, announces the service will leave Belgium again. | GIGAZINE, MLex |
| September 3, 2026 | At the EU Court of Justice, Advocate General Szpunar concludes EU law precludes several rules of Belgium's 2022 retention law: it authorises retention of a very broad set of traffic and location data without a genuine separation of data categories. | CJEU press release, GovInfoSecurity |
The story those 17 rows tell is escalation at one chokepoint. Fifteen years of Belgian blocking practice runs through DNS, from the 2011 Pirate Bay order to the 2025 resolver orders, and each escalation happened because the previous layer was trivially avoided. The resolver fight itself started in France, with Canal+'s May 2024 orders and OpenDNS's French exit; what Belgium added is durability, the first resolver order to survive its full court challenge, on August 20, 2026, and the second national market Cisco preferred to abandon rather than filter. And in all of it there is not a single measure against a VPN provider or a VPN user: the Belgian system regulates the pipes it can reach, and a VPN tunnel, which carries its DNS lookups inside the encryption to an endpoint outside Belgium, is simply not one of them.
Does Belgium watch internet users?
Less than most, and its courts are the reason. Belgium is the EU's stubborn test case on data retention: bulk retention laws were annulled in 2015 and again on April 22, 2021, each time for ignoring the EU Court of Justice's ban on keeping everyone's traffic data just in case. The current law of July 20, 2022 keeps traffic and location data for six, nine or twelve months depending on local crime rates and threat assessments, a design its critics call bulk retention with extra steps, and its third trip to the courts is under way: the Constitutional Court sent the law to Luxembourg, and on September 3, 2026 Advocate General Szpunar concluded it cannot stand without stricter safeguards. What sits in the retained records is who connected to what and when, not content. A VPN reduces that record to a single visible counterpart, the VPN server; our table of retention laws in 16 jurisdictions shows where Belgium's 12 months sits internationally, in the middle of the pack and under far more judicial control than most.
How does Belgium compare with France and Italy?
The three neighbours make a neat spectrum. Italy built a standing administrative machine, Piracy Shield, that names VPN and DNS providers as blocking addressees and has started fining viewers; the record is in our Italy legality and Piracy Shield reference. France runs blocking through courts but has extended orders to public DNS resolvers and, since May 2025, to five named VPN providers, documented in our register of website blocking in France. Belgium sits in between: judicial and administrative blocking as aggressive as anyone's against sites and resolvers, but nothing addressed to VPN providers and nothing aimed at users. For the everyday side, Le VPN has a server location in Belgium among servers in more than 100 locations, allows 10 simultaneous connections and comes with a 30-day money-back guarantee; the VPN for Belgium page covers use at home and abroad.
What changes next?
- Cisco's next move. After the August 20, 2026 ruling, Cisco announced OpenDNS would leave Belgium a second time; reports differ on whether it stays in the proceedings to fight on. Together with the parallel French litigation, this decides whether resolver blocking becomes a stable European instrument.
- The three-month compliance clock. Google, Cloudflare and Cisco have until late November 2026 to implement blocking under the modified order, with the FPS Economy's September 7, 2026 guidance setting the details.
- Case C-661/24. The EU Court of Justice's judgment on the 2022 retention law will follow the Advocate General's September 2026 opinion. A fourth Belgian retention rewrite is possible.
- The gambling blacklist. 985 domains and growing by batches every few weeks; the count is worth rechecking at each update of this page.
- Resolver scope creep. The newest piracy orders spared DNS resolvers while the litigation runs. If the appeal confirms the duty, expect rights holders to put resolvers back into every future order.
About the author
Le VPN Blog Editor
Alan Summers has been writing and editing for the Le VPN blog for years, covering online privacy, cyber security, and the best ways to get the most out of a VPN. He keeps a close eye on the news that affects internet freedom around the world and turns it into practical advice for Le VPN readers.
Articles by Alan Summers →