Federal Judge Blocks Utah’s SB 73 Over VPN Detection and Age Verification Concerns

The battle of protecting minors from explicit content vs. personal privacy continues in Utah. According to Yahoo News, a federal judge has blocked the implementation of SB 73, a law that requires age verification for adult content websites even if they use a Virtual Private Network (VPN). Aylo, the parent company of popular adult-related websites, filed the case for a preliminary injunction.

SB 73

Utah’s Senate Bill 73, or Online Age Verification Amendments, was signed into law by the state’s governor on March 4, 2026, with effect on May 6, 2026. The law is unique because it targets Virtual Private Networks and websites hosting adult-related content.

Essentially, websites implement age verification for everyone in Utah, even if they visit using a VPN. Adult-related websites that could not implement age verification for Utah-based users should block access. Websites could be fined up to $5,000 per violation and subject to civil liability and damages.

SB 73 Implementation Challenge

While Utah’s SB 73 offers increased protection for minors, technical implementation has far greater implications. To implement SB 73, websites will need pinpoint accuracy to determine if they are actually in Utah. Websites determine users’ locations primarily through IP addresses.

The challenge primarily lies in the technical aspects of determining user location. An IP address can only provide an approximate user location. A user just outside Utah could be subjected to age verification. On the other hand, users just inside Utah might not get age verification because an IP address is inaccurate.

The bigger problem is for VPN users. A VPN encrypts users’ location by providing them with a different IP address. Websites must identify VPN users and work around VPN encryption to enforce age verification. This can be technically difficult and may also affect users outside Utah.

According to the Electronic Frontier Foundation, the requirement is a “technical impossibility” and has far-reaching consequences:

“SB 73 burdens the rights of all internet users outside of Utah because it requires adult websites to either know every visiting user’s physical location and then block those in Utah, or to verify every visitor’s age just in case they might be in Utah.”

What the Injunction Actually Says

The injunction focuses largely on precise user location to implement the law in Utah. Utah’s Attorney General argued they would implement a “reasonableness standard” for geolocation. However, in his injunction ruling, the judge noted the need for a precise location provision because “In the end, the statute says nothing about reasonableness in geolocation efforts…”

Further amendments and technical reviews are needed to implement SB 73. Verifying a user’s exact location for age verification can be challenging, especially when VPNs are used. States can create their own laws, but they must also consider technical challenges, user privacy, and how the laws may affect people outside the state. Current technology does not offer pinpoint accuracy, especially with encryption tools like VPNs. Amendments may be needed to support age verification while avoiding unnecessary effects on users outside Utah.