Using a virtual private network to protect personal data or online activities during web browsing is legal in many countries, like the United States, United Kingdom and France. However, this legality has some limits and can vary based on the specific activities conducted through the VPN.
Source: Security on TechRepublic