Utah is set to become the first U.S. state to enforce a law that directly targets VPNs for age verification. The Online Age Verification Amendments, Senate Bill 73, goes into effect on May 6, 2026. This law aims to regulate access to adult websites by requiring companies to verify users’ ages, even if they are using a VPN.
The law was signed by Governor Spencer Cox on March 19, 2026. It mandates that websites must implement age verification processes that can identify users even when they employ VPNs. Companies will face liability if they fail to comply with these requirements.
Critics argue that the law creates a “liability trap” for websites unable to reliably detect the locations of VPN users. The Electronic Frontier Foundation warns that this could lead to invasive identity checks for millions of users, significantly impacting digital privacy rights.
Additionally, the law prohibits adult websites from providing instructions on how to use a VPN to bypass age checks. This approach has raised serious concerns about First Amendment rights and free speech, as it could limit access to information.
The legislation reflects a broader trend among governments targeting VPNs as obstacles to online content regulation. However, it does not explicitly ban VPN usage; rather, it discourages it through potential legal repercussions.
As Utah prepares for this new regulation, many question its effectiveness in enforcing age verification without infringing on user privacy. The potential for websites to comply while respecting user rights remains uncertain.
The implications of this law extend beyond Utah. It may influence other states considering similar measures against VPN usage in online content regulation.
