Proton VPN Says 458 Legal Orders Since 2019 Yielded No User Data

Abeerah Hashim  - Security Expert
Last updated: July 16, 2026
Share
Switzerland’s Proposed Monitoring Law Faces Backlash from Proton and Privacy Advocates
  • Proton VPN received 47 court-approved legal orders during the first half of 2026, but it rejected every one.
  • The company said it could not identify any user because it does not keep connection logs.
  • Since 2019, Proton VPN has received 458 legal orders, and none has resulted in user data being handed over.

Proton VPN has revealed that it received 47 legal orders during the first half of 2026. Every request asked the company to identify users linked to specific VPN servers at certain times. However, the company said it could not provide the requested details because it does not keep connection logs.

The figures appeared in Proton VPN’s latest transparency report, which the company updated on July 14. The report shows that every legal request received through June was denied. According to Proton VPN, there was simply no data available that could identify any customer.

The latest numbers also add to the company’s long-term record. Since 2019, Proton VPN has received 458 legally binding orders approved by Swiss authorities. The company says none of those requests resulted in user information being shared because the records investigators wanted never existed.

Swiss privacy laws shape every request

Proton VPN operates from Switzerland. Because of that, the company says it only responds to legal requests approved by Swiss courts. According to Proton VPN, it is not required to follow requests from other countries unless they first go through the Swiss legal system. The company also said Swiss law prevents it from handing over information directly to foreign authorities without the proper legal process.

Swiss authorities have been active in fighting cybercrime. Europol and Swiss police recently dismantled a $1.4 billion dark web cryptomixer.

The provider explained that Switzerland has strong privacy protections built into its laws. It also said Swiss law does not require VPN companies to save connection logs. Proton VPN says it follows a strict no-logs policy that has been checked through several independent audits.

According to the company, it does not collect or store information showing what customers do online or when they connect to its servers. Because those records are never created, the company says it cannot hand them over, even after receiving a legally binding court order.

Proton VPN explained that every legal request it has received since launching in 2017 followed the same pattern. Swiss authorities wanted the company to identify the person connected to a certain VPN server at a specific date and time. The company said it was unable to comply in every case because the connection logs needed to identify a customer simply do not exist.

Instead of saying it refused to cooperate, Proton VPN explained that it had no information available to provide. According to the company, that is the direct result of its no-logs policy rather than a decision made after receiving the requests.

Transparency report shows six years of denied orders

The latest transparency report also gives a year-by-year breakdown of every legal order Proton VPN has received. The company reported 47 legal orders through June 2026. It denied all 47.

In 2025, Proton VPN received 59 legal orders. Every request was also denied. The report lists 53 legal orders for 2024. Again, none resulted in user information being provided. During 2023, Swiss authorities approved 60 legal orders involving Proton VPN. The company said all 60 were denied because it had no connection logs.

The same pattern continued in earlier years. Proton VPN received 80 legal orders during 2022. Every request was denied. The company reported 121 legal orders in 2021. That remains the highest yearly total listed in the report. Even then, Proton VPN said it could not identify any customer because it had no records to provide.

The report also lists 37 legal orders in 2020 and one legal order in 2019. According to the company, every request ended the same way. Altogether, the report now shows 458 legal orders since 2019.

None produced identifying information because Proton VPN says it never stores the requested connection data. The company says this approach follows Swiss law and reflects how its service is designed to operate.

The company says the warrant canary is unnecessary under Swiss law

The transparency report also explains why Proton VPN does not publish a warrant canary. Some technology companies use warrant canaries to signal whether they have received secret government surveillance orders. Proton VPN says that practice has little value under Swiss law.

According to the company, Swiss law requires people targeted by surveillance or data requests to eventually receive notice. That notification gives them the chance to challenge the request through the legal system. For that legal requirement, Proton VPN says a warrant canary would not provide any meaningful extra protection for its users.

The company maintains that its no-logs policy remains the main reason it cannot identify customers connected to its VPN servers. Its latest transparency report shows that the policy has produced the same result for every legal request received over the past several years.

From 2019 through the first half of 2026, every court-approved order seeking user identification ended without customer data being handed over because, according to Proton VPN, the connection records requested by investigators were never collected or stored in the first place.

Share this article

About the Author

Abeerah Hashim

Abeerah Hashim

Security Expert

Abeerah is a passionate technology blogger and cybersecurity enthusiast. She yearns to know everything about the latest technology developments. Specifically, she’s crazy about the three C’s; computing, cybersecurity, and communication. When she is not writing, she’s reading about the tech world.

More from Abeerah Hashim

Comments

No comments.