As the sun rose on March 19, 2026, Utah made headlines when Governor Spencer Cox signed Senate Bill 73, a law that would soon make the state the first in the U.S. to enforce age verification through VPNs for adult websites. This move, however, sparked immediate discussions about privacy and freedom of speech.
Senate Bill 73 is set to go into effect on May 6, 2026. It specifically targets VPN usage to enforce age checks on adult content, creating a unique intersection between digital privacy and online regulation. The law not only holds companies accountable for verifying user ages but also imposes liability even if users attempt to access content through VPNs.
Critics quickly raised alarms about the implications of this legislation. The Electronic Frontier Foundation warned that the law could lead to “invasive identity checks for millions of users” — a sentiment echoed by NordVPN, which described the situation as a “liability trap”. Companies will be pressured into blocking known VPN IPs, a technical challenge they may struggle to overcome.
Key facts about Senate Bill 73:
- The law prohibits adult websites from providing instructions on how to bypass age checks using VPNs.
- It does not explicitly ban VPN use but effectively discourages it through potential liabilities.
- The legislation is part of a broader trend where governments increasingly target VPNs as obstacles to online regulation.
The implications extend beyond mere compliance; they touch upon fundamental rights. Free speech advocates argue that this law infringes on First Amendment rights by restricting access to information based solely on geographic location. As Utah residents have observed other states adopt similar mandates, many have turned to VPNs for protection against invasive regulations — making this new law particularly concerning.
Still, questions linger about its effectiveness. How can companies comply without violating user privacy? The answers remain elusive as officials have yet to provide clarity on enforcement mechanisms or compliance timelines.
This legislative move is unprecedented in its direct targeting of digital tools designed for privacy. As Utah prepares for this new chapter in online content regulation, the balance between protecting minors and safeguarding individual liberties hangs in the balance.
The law goes into effect soon—on May 6, 2026—and it will be watched closely by other states considering similar measures.