Pull to refresh
Logo
Utah starts age checks as court keeps VPN rule blocked

Utah starts age checks as court keeps VPN rule blocked

Rule Changes Salt Lake City, UT local

The state began enforcing age checks for adult sites Nov. 2; a federal judge still blocks the VPN provision.

Overview

Updated Oct 31

Utah began enforcing its age-verification requirement for adult websites on Nov. 2, 2026. The state says commercial sites with a substantial amount of explicit material must use reasonable methods to confirm users are at least 18. Fines can reach $2,500 per violation.

A federal judge still blocks a separate provision that would have treated users of a virtual private network, or VPN, as if they were in Utah. Judge David Barlow granted Aylo, Pornhub's parent, a temporary block on Sept. 24. The lawsuit is paused until the Utah Legislature's 2027 session ends, with a status report due March 19, 2027.

Why it matters

Utah is enforcing age checks while its first-in-the-nation VPN rule stays blocked, a test other states may watch.

Last Monday's email for Salt Lake City, UT

Sent Nov 9. It carried:

Get next Monday's: one short email a week. Free. Unsubscribe in one click.

Questions about this story

Free account needed to ask — your question is kept and asked for you right after sign-up. Answers are public.

No questions yet — be the first to ask.

Key Indicators

18
States with age-verification laws
At least 18 states require adult sites to verify ages; Utah's VPN rule is the first of its kind.
Nov. 2
Enforcement began
Utah's Division of Consumer Protection started enforcing age-verification rules on Nov. 2, 2026. The VPN location provision remains blocked.

Voices

Curated perspectives — historical figures and your fellow readers.

Sign up to generate historical perspectives on this story.

People Involved

Organizations Involved

Timeline

May 2023 November 2026

14 events Latest: November 2nd, 2026 · 1 week ago Showing 8 of 14
Tap a bar to jump to that date
  1. Utah begins enforcing age-verification rules

    Latest Regulatory

    The Division of Consumer Protection started enforcing SB 73's age-check requirement. The VPN location provision remains blocked by a federal injunction.

  2. State announces enforcement start for age checks

    Regulatory

    Utah's Department of Commerce said its Division of Consumer Protection will begin enforcing the age-verification rules on Nov. 2. Fines of up to $2,500 per violation apply; the VPN provision stays blocked.

  3. Utah's 2% adult-content tax takes effect

    Regulatory

    SB 73 added a 2% tax on adult websites to help fund enforcement and a youth mental health fund. The Utah State Tax Commission will enforce it.

  4. VPN providers refuse to change services for Utah

    Industry response

    NordVPN and AdGuard VPN said Utah's law does not create compliance obligations for them. They plan to keep offering their services normally in Utah.

  5. Enforcement pause becomes public

    Development

    News reports confirm Utah won't enforce the VPN law pending Barlow's ruling.

  6. Utah passes VPN-targeting law

    Legislative

    The legislature passes SB 73, adding VPN checks and giving the state enforcement authority over age verification. The governor signs it in March; it takes effect May 6.

  7. Utah's first age-verification law takes effect

    Regulatory

    Requires adult sites to verify users are 18 or older; passed unanimously.

  8. Pornhub blocks Utah users

    Corporate action

    Aylo disables access for Utah IP addresses in protest of the new law.

Scenarios

1

Judge blocks Utah's VPN age-verification rule

Possible Resolves by End of 2026

Discussed by: Aylo's legal team and constitutional law scholars who view the extraterritoriality argument as strong

Barlow grants Aylo's preliminary injunction, pausing Utah's 2026 law while the lawsuit proceeds. Aylo keeps blocking Utah users. A ruling for Aylo on the dormant Commerce Clause would signal that state laws punishing VPN-using out-of-state users reach too far.

2

Court upholds the law; Aylo appeals

Possible Resolves by End of 2026

Discussed by: Utah's Attorney General's Office, which argues compliance is feasible and not unduly burdensome

Barlow denies the injunction, finding the state's interest in shielding minors outweighs the compliance burden. Utah's rule takes effect for Aylo, and the company appeals to the 10th Circuit, which would then evaluate the novel VPN provision.

3

Rulemaking leads to settlement

Uncertain Resolves by Q2 2027

Discussed by: The joint stipulation, which lets Aylo participate in rulemaking without liability

The Division of Consumer Protection finalizes its administrative rule, expected in October 2026. Aylo's counsel has signaled openness to participating. If the rule addresses key concerns, the company may drop the lawsuit with the law left in place.

4

Utah Appeals the Injunction to the 10th Circuit

Possible Resolves by Q2 2027

Discussed by: Utah Attorney General's Office, which has argued the law is workable

Utah asks the 10th Circuit to lift the injunction, arguing Judge Barlow misread the statute. The VPN provision stays blocked while the appeal runs. The circuit would be the first appellate court to weigh a state law targeting VPN use around age checks.

5

Barlow Rules on the Law's Constitutionality

Uncertain Resolves by End of 2027

Discussed by: Both parties, who continue litigating after the preliminary injunction

Judge Barlow decides whether the actual-location provision violates the Commerce Clause or the First Amendment. His injunction order noted the statute 'says nothing about reasonableness in geolocation efforts.' A final ruling could come in 2027.

6

Legislature Amends Law; Aylo Drops Lawsuit

Uncertain Resolves by Mar 15, 2027

Discussed by: Joint motion from Aylo and Utah Attorney General, which stated the parties anticipate the legislature may amend S.B. 73

Utah's 2027 session rewrites the VPN provision, adding a reasonableness standard. If the amendment addresses Aylo's constitutional objections, the company could drop the lawsuit. The injunction is the backdrop for negotiations.

Historical Context

3 moments from history that rhyme with this story — and how they unfolded.

2023-2025

Free Speech Coalition v. Paxton (2023-2025)

Texas passed an age-verification law in 2023. Adult-industry group Free Speech Coalition sued; Pornhub blocked Texas users. In a unanimous three-judge ruling in 2025, the 5th Circuit upheld the law.

Then

The law stands; Pornhub remains blocked in Texas.

Now

The ruling validated age-verification mandates and encouraged similar laws in other states.

Why this matters now

Utah's 2023 law mirrors Texas's approach. But Utah's 2026 VPN provision is new territory the Texas court never considered.

June 1997

Reno v. ACLU (1997)

The Supreme Court struck down the Communications Decency Act's indecency provisions, ruling the internet deserves full First Amendment protection. Justice Stevens called it a 'vast democratic forum.'

Then

The CDA's speech restrictions were voided.

Now

Set the baseline that adult content online is protected speech, which all age-verification laws must now work around.

Why this matters now

Utah's law must clear the strict bars Reno set for content restrictions, even though it targets access rather than speech itself.

April 2002

Ashcroft v. Free Speech Coalition (2002)

The Supreme Court struck down prohibitions on 'virtual' child pornography that did not involve real minors, finding them overbroad under the First Amendment.

Then

The provisions were voided; the government shifted to prosecuting cases involving actual abuse imagery.

Now

Reinforced that online sexual speech receives strong constitutional protection, shaping how courts view age-verification laws.

Why this matters now

Like Ashcroft, the Utah case asks how far the government can go to protect minors from online sexual content without trampling adult speech.

Sources

(23)