vpn regulation shift