Utah's VPN Age Verification Rule Just Hit a Legal Wall

Eleanor Vance · 2026-09-25

A federal judge in Salt Lake City just handed down a decision that could ripple through every state trying to regulate online age checks. On Thursday, U.S. District Judge David Barlow enjoined a key part of Utah's age-verification law — specifically the provision that forced platforms to verify a user's age even when that person was using a VPN to mask their location. That's a big deal. And if you run a platform, or you're just someone who cares about privacy online, you're going to want to understand what happened here. ### What Utah Was Trying to Do Utah's law, like similar ones popping up across the country, was designed to keep minors away from adult content. The idea sounds simple enough: if you're going to host or distribute that kind of material, you need to confirm your users are adults. But here's where it gets messy. The original law said platforms had to verify age even if someone was using a VPN. Think about that for a second. A VPN hides your location. So how exactly is a platform supposed to know you're in Utah? Short answer: they can't. Not reliably, anyway. Judge Barlow's order basically said, "Yeah, you can't enforce that." The court enjoined that portion of the law, meaning it can't be enforced while the legal challenge plays out. ### Why This Matters Beyond Utah Other states are watching. Tennessee, Arkansas, and a handful of others have passed or proposed similar age-verification laws. If Utah's VPN provision gets struck down permanently, it sets a precedent. Platforms could argue that any law requiring age checks for VPN users is unworkable and unconstitutional. > "You can't ask a company to verify something they have no technical way of knowing," one digital rights attorney told me recently. "That's not regulation. That's a setup for failure." And that's really the heart of it. The judge didn't say age verification itself is illegal. He said this specific requirement — verifying VPN users — goes too far. ### What This Means for Platforms and Users If you're running an adult content platform, here's the practical takeaway: - You still need to comply with age-verification laws in states that require them. - But you may not need to try to verify users who are clearly using VPNs to hide their location. - The legal landscape is shifting fast, so keep your lawyer on speed dial. For users, this is a small win for privacy. VPNs aren't a magic shield, but this ruling means platforms won't be forced to treat them like one. ### The Bigger Picture The fight over age verification isn't going away. If anything, it's heating up. States want to protect kids. Platforms want to avoid liability. And users want privacy. Those three goals don't always play nice together. Judge Barlow's order is a temporary pause, not a final verdict. But it's a signal. Courts are starting to push back on laws that demand the impossible. We'll be watching what happens next — and we'll keep you posted.