The Court of Justice of the European Union ruled that a VPN is a lawful technical tool and that geoblocking is the responsibility of the rights holder, not the VPN provider. The ruling clears up a legal gray area that had gone unresolved for more than a decade.