Utah began enforcing age-verification requirements for commercial adult websites on November 2, 2026, even as a separate provision remained subject to a federal court injunction. The ruling concerned websites’ liability for visitors physically located in Utah who concealed their location using VPNs. Meanwhile, Google Trends data shows two notable peaks in relative search interest for “VPN” in Utah in the days leading up to enforcement.
Utah’s Age Verification Rules and Penalties
Under Utah’s age-verification law, commercial websites that knowingly and intentionally publish or distribute material harmful to minors must verify visitors’ ages if more than one-third of their content falls into that category.
The law lists digitized identification cards, independent third-party services that check information against commercial databases, and commercially reasonable methods using transactional records as possible ways to verify age.
Utah first introduced adult-site age verification in 2023. Senate Bill 73, passed in 2026, amended the law and gave the Division of Consumer Protection authority to investigate violations and set verification standards.
Operators that fail to comply can face administrative fines of up to $2,500 per violation. The division can also take cases to court and use specialized auditing technology to monitor whether covered websites are compliant.
VPN Search Interest in Utah Peaks Ahead of Enforcement
VPN search interest in Utah reached its highest point of the week on October 30, the same date the Department of Commerce announced the November 2 enforcement start. Google Trends recorded a relative interest score of 100 for the term “VPN.”
Interest rose again on November 1, a day before enforcement began, reaching approximately 80. It fluctuated over the following days but remained below those earlier peaks. Overall, Google Trends reported a 600% year-over-year increase.
The platform measures relative search interest on a scale of 0 to 100, rather than reporting actual search volumes. While the data does not establish what prompted those searches, the peaks coincided with key developments surrounding Utah’s age-verification law.
Why a Federal Judge Blocked Utah’s VPN-Related Provision
Utah Code Section 78B-3-1002(3) held websites responsible for Utah visitors even when VPNs concealed their locations. Pornhub’s parent company, Aylo, challenged the provision, arguing that websites cannot reliably determine every visitor’s location.
On September 24, US District Judge David Barlow issued a preliminary injunction, finding that the provision effectively demanded perfect geolocation, which existing technology cannot achieve. Utah argued that reasonable efforts to determine users’ locations would suffice.
However, the judge found that the law contained no such limitation. He also concluded that requiring websites to verify users outside Utah to avoid liability would likely place an excessive burden on interstate commerce.
The injunction applies only to the actual-location provision. Utah’s age-verification requirements remain enforceable, while a separate restriction preventing covered websites from facilitating or encouraging VPN-based circumvention was not included in the ruling.
Privacy Concerns Remain Over Age Verification
Aylo has also raised privacy and security concerns about website-level age checks, particularly when verification involves sensitive personal information. The company supports verifying users’ ages at the device level instead of requiring individual websites to conduct checks.
Utah officials say the law requires websites to verify users’ ages, not their identities. Under the legislation, websites and third-party verification providers cannot retain identifying information after granting access. Margaret Busse, head of the Utah Department of Commerce, told KSL that the state does not collect this data.
Related Reads:
