Utah tightens control: VPN will no longer bypass age verification on adult sites

The state of Utah is taking a radical step in regulating the digital space, and this is a signal for the entire industry. The new law SB 73 dramatically changes the rules of the game for platforms with adult content, requiring them to identify visitors regardless of the use of anonymizing tools. This is not just about formal verification — sites are now obliged to "see" the user's real location, even if they are actively masking their IP address through VPNs, proxy servers, or other means of bypassing geoblocking.

A key aspect of the legislative initiative is the ban on facilitating the circumvention of verification. Operators can no longer provide users with instructions or technical loopholes to evade control. This means that responsibility is shifted not only to the visitor, but also to the business itself, creating a precedent for other jurisdictions.

Financial risks and data protection

The law introduces a strict penalty system: administrative and civil fines reach $2,500 for each documented case of violation. For large platforms with a million-strong audience, this means potentially devastating amounts that could run into tens of millions of dollars for a single day of non-compliance.

Separate requirements are spelled out for age verification service providers. They are categorically prohibited from storing personally identifiable data after access has been granted. This is a balancing mechanism designed to minimize the risks of leaks in a sensitive area where confidentiality is of paramount importance.

From my point of view, this law is just the tip of the iceberg. Utah is setting a trend that other conservative states will likely follow, leading to a fragmentation of internet regulation in the United States. However, the main challenge is technical implementation: how to effectively detect VPN traffic without violating the rights of law-abiding users. I believe we will see a wave of lawsuits from human rights organizations challenging the constitutionality of such measures, making this case an important precedent for all digital law.