LaLiga, the top Spanish football league, has asked the European Commission to include four major virtual private network (VPN) services—NordVPN, Proton VPN, ExpressVPN, and Surfshark—in the upcoming Counterfeit and Piracy Watch List 2027. The request focuses on how some websites affiliated with these services promote their use to bypass court-ordered blockades on illegal streaming sites and to circumvent geographical restrictions on content. LaLiga is not targeting the technology of VPNs themselves but the way these services are commercially promoted through linked sites, which the league claims violates its broadcasting rights. One concern is that some affiliated sites explain how to use a VPN to access blocked pirate streaming services, which LaLiga argues exploits the ability to bypass legal restrictions. Another issue is that some guides show users how to use a VPN to access content that is legally available in other countries, which the league views as a breach of its territorial broadcasting contracts. LaLiga also raises the issue of potential conflicts of interest, noting that some affiliated content may not be fully independent. It specifically mentions vpnMentor, a publication linked to Kape Technologies, the parent company of ExpressVPN, though it acknowledges that these connections are disclosed by the sites themselves. This request is part of a broader legal struggle already unfolding in Spain. In February, a court in Cordoba ordered NordVPN and Proton VPN to block certain IP addresses linked to pirate broadcasts, without giving the companies a chance to respond. In May, the court refused to penalize NordVPN for not complying with the order, but the legal process is still ongoing. The inclusion of these VPN services in the Counterfeit and Piracy Watch List 2027 would be a significant development, as no VPN providers have previously been listed in the annual report. The European Commission clarifies that the list is not a legal judgment but a tool to raise awareness of potential issues. The public consultation for the 2027 list ended on September 21, but interested parties can still submit their views until October 28, 2026. The final list is expected to be published in the first half of 2027. So far, the European Union has not placed any of these VPN services on a blacklist. LaLiga’s request highlights the ongoing debate about whether companies can be held accountable for how their partners promote their services, especially in relation to issues of copyright and digital rights.