When Swedish VPN provider Mullvad tried to run a television advertisement in the United Kingdom warning citizens about mass surveillance, it expected some friction. What it got was an outright rejection — and a decision that has since fueled one of the more provocative guerrilla marketing campaigns the privacy industry has seen in years.
The company, known for its staunch no-logging policy and privacy-first ethos, submitted a 30-second television spot to Clearcast, the UK body responsible for vetting advertisements before they air on commercial television. The ad’s message was direct: surveillance is pervasive, and people should take steps to protect their digital privacy. Clearcast refused to approve the ad, citing concerns that it could cause “undue fear” among viewers. Rather than retreat, Mullvad took its message to the streets — literally.
A TV Ad Deemed Too Frightening for British Viewers
According to reporting by TechRadar, Clearcast’s rejection centered on the ad’s tone and content. The advertisement reportedly highlighted the extent of government and corporate surveillance, framing VPN usage as a necessary countermeasure. Clearcast determined that the messaging could alarm audiences and was therefore unsuitable for broadcast. The UK’s advertising standards framework gives Clearcast significant gatekeeping power; without its approval, no commercial can air on major British television networks.
Mullvad did not take the rejection quietly. The company publicly disclosed the ban and accused UK regulators of effectively censoring a legitimate conversation about digital privacy. In a statement shared on its website and social media channels, Mullvad argued that the real source of “undue fear” should be the surveillance infrastructure itself — not an advertisement warning people about it. The company framed the rejection as evidence of the very problem it was trying to address: that institutions would rather suppress discussion of surveillance than confront its implications.
From Broadcast Rejection to Billboard Rebellion
With television off the table, Mullvad pivoted to out-of-home advertising. The company launched a campaign featuring physical billboards, posters, and street-level advertisements in cities across the UK. The messaging retained the same anti-surveillance theme that Clearcast had found objectionable, but in a medium where the same pre-approval restrictions do not apply. Outdoor advertising in the UK is regulated by the Advertising Standards Authority (ASA) through its CAP Code, but does not require the same pre-clearance process that television ads must undergo through Clearcast.
The street campaign has drawn considerable attention, both from privacy advocates who view it as a principled stand and from marketing professionals who recognize the strategic value of a “banned ad” narrative. Being rejected by a regulatory body can, paradoxically, generate far more publicity than the original ad would have achieved on its own. Mullvad appears to understand this dynamic well. The company has leaned into the controversy, using the ban as a central talking point in its broader communications strategy.
The UK’s Complicated Relationship with Surveillance and Privacy
The timing of Mullvad’s campaign is notable given the UK’s ongoing tensions between surveillance powers and privacy rights. The Investigatory Powers Act of 2016, commonly referred to as the “Snooper’s Charter,” grants British intelligence agencies and law enforcement broad authority to collect and retain communications data. The legislation requires internet service providers to store customers’ browsing histories for up to 12 months and makes them accessible to dozens of government bodies.
More recently, the UK government has pushed for expanded powers under proposed amendments to the Investigatory Powers Act. These amendments, which have been the subject of heated debate in Parliament, would require technology companies to notify the Home Office before implementing security features — including end-to-end encryption — that could hinder government access to communications. Apple pulled its Advanced Data Protection encryption feature from the UK market earlier this year rather than comply with a secret order to create a backdoor, a move that made international headlines and underscored the growing conflict between tech companies and the British state over user privacy.
Mullvad’s Brand Identity as a Privacy Absolutist
Mullvad has long positioned itself at the far end of the privacy spectrum among commercial VPN providers. Unlike many competitors that collect email addresses, payment information, and usage data, Mullvad allows users to sign up with nothing more than a randomly generated account number. The company accepts cash payments sent by mail, as well as cryptocurrency, to minimize any financial trail connecting a user to their account. It does not require an email address, name, or any other identifying information.
The company is based in Sweden and operates under Swedish jurisdiction, which, while part of the 14 Eyes intelligence-sharing alliance, has comparatively strong privacy protections in its domestic law. Mullvad has been audited multiple times by independent security firms, and in 2023, Swedish police executed a search warrant at the company’s offices but reportedly left empty-handed because there were no customer logs to seize. That incident became a defining moment for the brand, reinforcing its claim that it genuinely cannot identify its users even when compelled by law enforcement.
The Advertising Industry’s Role as Privacy Gatekeeper
The Clearcast rejection raises broader questions about the role advertising regulators play in shaping public discourse on politically sensitive topics. Clearcast is not a government agency; it is an industry body funded by UK broadcasters including ITV, Channel 4, Channel 5, and Sky. Its mandate is to ensure advertisements comply with the UK Code of Broadcast Advertising (BCAP Code), which prohibits ads that could cause “serious or widespread offence” or “undue fear or distress.”
Critics argue that applying the “undue fear” standard to a factual discussion about surveillance sets a troubling precedent. Privacy advocates have pointed out that advertisements for home security systems, insurance products, and even government public health campaigns routinely employ fear-based messaging without facing similar restrictions. The distinction, they argue, is that Mullvad’s ad implicitly criticizes government policy — a category of speech that advertising regulators may be less comfortable facilitating, even if they would not articulate it in those terms.
A Growing Market for Privacy Tools Amid Rising Surveillance Concerns
Mullvad’s campaign comes at a time when consumer interest in privacy tools is growing across Europe and the UK. VPN usage in the United Kingdom has risen steadily in recent years, driven by awareness of the Investigatory Powers Act, high-profile data breaches, and increasing public skepticism of both government and corporate data collection practices. Research from Surfshark and other industry analysts has shown that VPN adoption tends to spike following major surveillance revelations or legislative changes that expand state monitoring powers.
The broader VPN market has also become increasingly competitive, with providers like NordVPN, ExpressVPN, and Proton VPN all vying for privacy-conscious consumers. Mullvad occupies a distinct niche: it is smaller, more expensive on a per-month basis than many competitors, and does virtually no affiliate marketing — an unusual stance in an industry where affiliate deals drive the majority of customer acquisition. Its marketing has historically relied on word-of-mouth, endorsements from security researchers, and partnerships like its collaboration with the Tor Project on the Mullvad Browser.
The Strategic Calculus of Getting Banned
From a marketing perspective, the banned-ad strategy has precedent. Companies across industries have discovered that a rejected or censored advertisement can generate organic media coverage worth many times the cost of the original media buy. The narrative of a plucky company standing up to institutional censorship resonates with audiences, particularly in the privacy and technology sectors where distrust of authority runs high.
Mullvad’s decision to take its campaign to the streets also carries symbolic weight. Physical advertisements in public spaces are harder to block, filter, or algorithmically suppress than digital content. By plastering its anti-surveillance message on billboards and walls in British cities, Mullvad is making a point about the limits of censorship — and doing so in a way that directly confronts passersby with questions about who is watching them and why.
Whether the campaign will translate into meaningful subscriber growth remains to be seen. But for Mullvad, the commercial outcome may be secondary to the ideological statement. The company has consistently signaled that it views privacy advocacy as part of its core mission, not merely a marketing angle. In a UK environment where surveillance powers continue to expand and regulators appear uncomfortable with public criticism of those powers, Mullvad’s street-level campaign serves as both advertisement and protest — a dual purpose that its founders would likely consider entirely appropriate.