Uh, that's not going to fly.
We use a VPN to enable remote users to access our internal network for things we don't want exposed to the public at large. And we're not a tech company.
This really sounds like someone who has no fucking clue trying to legislate away all the loopholes to their other shitty legislation.