Utah
Utah Age Verification Law: SB 287, SB 73, and the App Store Act
Utah was the first state to enact an adult-content age-verification law and the first to enact an App Store Accountability Act, and both of its laws survived their court challenges for procedural reasons rather than because a court reached and ruled on the First Amendment merits. That distinction matters: it means Utah's laws are standing today, but not for the same reason Texas's law is standing, and this page keeps that difference precise rather than implying an equivalent win.
What Utah's Adult-Content Law Requires
Senate Bill 287 (2023) requires a commercial entity that knowingly distributes material harmful to minors online to use reasonable age-verification or age-assurance methods, generally a digital identification check or comparison against a third-party identity database, before granting access. It took effect May 3, 2023. Senate Bill 73, enacted in 2026, strengthened the law by extending its reach to Utah residents accessing covered sites through a VPN, by prohibiting covered sites from providing instructions on how to evade the requirement using a VPN, and, separately, by giving Utah's Division of Consumer Protection its own enforcement authority for the first time: administrative fines of up to $2,500 per violation and the ability to bring a court action, in addition to the law's existing private right of action.
The VPN provisions are not currently being enforced, however. Aylo, Pornhub's parent company, sued Utah in May 2026 over SB 73's requirement that a VPN user physically located in Utah be treated as a Utah user regardless of the VPN. Utah's Department of Commerce agreed to pause enforcement of those specific provisions until September 3, 2026 while the litigation proceeds. The rest of SB 73, including the Division of Consumer Protection's new enforcement power, is not part of that pause.
This research did not independently pull the exact codified Utah Code section number from statute text; only bill-page metadata was confirmed. This page identifies the law by its bill numbers, SB 287 and SB 73, rather than asserting an unconfirmed section citation.
Why Utah's Law Survived: Jurisdiction, Not the First Amendment Merits
Utah's adult-content law survived its court challenge, Free Speech Coalition, Inc. v. Anderson, for a structural reason rather than a substantive one. SB 287 is written as a «bounty» style law with no dedicated state enforcement mechanism, so the federal district court, affirmed by the Tenth Circuit, dismissed the challenge for lack of jurisdiction: there was no state enforcer for the plaintiffs to sue.
That is meaningfully different from Texas's story. In Free Speech Coalition v. Paxton, the Supreme Court actually reached and ruled on the First Amendment question and upheld Texas's law on the merits. Utah's law is standing today because there was no one to sue, not because a court examined the free-speech question and sided with the state. Readers should not treat Utah's outcome as a substantive win of the same kind Texas achieved.
That "no one to sue" fact pattern is specific to SB 287 as it existed at the time of the Anderson dismissal. Senate Bill 73 (2026) changed it going forward: it gave the Division of Consumer Protection its own administrative-fine and court-action authority over the age-verification chapter, which means Utah now has a real state enforcer where it previously had none. A future challenge to the law as amended would not have the same jurisdictional off-ramp Anderson had.
Utah's App Store Accountability Act: Delayed a Year, AG Authority Eliminated
Utah was the first state to enact an App Store Accountability Act, Senate Bill 142 (2025), originally set to take full effect May 6, 2026. House Bill 498, enacted in 2026, delayed that date a full year, to May 6, 2027, and separately eliminated the Utah Attorney General's authority to enforce the law. Enforcement now rests solely on a private right of action: an injured minor, or that minor's parent or guardian, may sue an app store or app developer directly. The private-suit provision itself takes effect earlier, December 31, 2026, ahead of the broader May 6, 2027 date for the law's other obligations. That combination, delay plus removal of the state's own enforcement power, is unusual and should not be described as a simple one-year delay.
Once House Bill 498 removed the Attorney General's enforcement authority, the industry challenge to the original law, brought by CCIA, the Computer and Communications Industry Association, became moot on its own terms, and the plaintiffs voluntarily dismissed the case on April 21, 2026. That dismissal followed a legislative fix, not a court ruling on the law's constitutionality.
What Happens When You Visit an Affected Site From Utah
Utah's adult-content law does not ban the material it covers; it requires verification before access. Pornhub's parent company, Aylo, has taken the same approach in Utah that it has taken in Texas, Mississippi, and Arizona: blocking access rather than building a verification system, which is Aylo's own business decision, not something Utah's law requires.
Two Laws, Two Different «Why Is This Standing» Stories
It is worth stating plainly that Utah's two laws survived for different procedural reasons and should not be described as though a court affirmed either one on the constitutional merits. SB 287 stands because there was no state enforcer to sue. The App Store Accountability Act's original challenge was dismissed as moot once the legislature itself removed the Attorney General's enforcement power. Neither outcome is the kind of merits ruling Texas received in Free Speech Coalition v. Paxton.
Verified directly against Utah's official legislative bill pages for Senate Bill 73 (2026) and reporting on the CCIA challenge's voluntary dismissal, current as of 2026-08-13. The exact codified Utah Code section for SB 287 was not independently confirmed against statute text this session and is intentionally not asserted here as a specific citation.
Related Resources
- Age Verification Laws by State
- App Store Age Verification Laws
- Texas Age Verification Law
- Arizona Age Verification Law
Last updated: 2026-08-13.
Frequently Asked Questions
Was Utah's age-verification law upheld by a court the same way Texas's was?
Not in the same sense. Utah's law survived because the challenge was dismissed for lack of jurisdiction, since the law has no state enforcement mechanism to sue over. A court never reached and ruled on the First Amendment merits the way the Supreme Court did for Texas.
Does Utah's law apply to VPN users?
On paper, yes, as of Senate Bill 73 (2026), which extended coverage to users physically located in Utah even when they use a VPN and banned covered sites from providing VPN-evasion instructions. In practice, those specific provisions are not currently being enforced: Aylo sued Utah over them in May 2026, and Utah's Department of Commerce agreed to pause enforcement until September 3, 2026 while the case proceeds.
When does Utah's App Store Accountability Act take effect?
The private-right-of-action provision takes effect December 31, 2026, and the law's broader obligations take effect May 6, 2027, after House Bill 498 delayed the original May 2026 date by a year.
Does the Utah Attorney General enforce the App Store Accountability Act?
No, not anymore. House Bill 498 (2026) eliminated the Attorney General's enforcement authority; enforcement now rests solely on a private right of action by injured minors or their parents.
Why was the challenge to Utah's App Store Accountability Act dismissed?
The plaintiffs voluntarily dismissed their case on April 21, 2026, after House Bill 498 removed the Attorney General's enforcement power, which mooted the objections the suit had raised.
Is adult content banned in Utah?
No. Utah's law requires age verification before access; it does not ban the underlying content. Some sites choose to block Utah traffic rather than verify, which is that company's own decision.
Updates
Independently fact-checked against the cited primary sources
Sources and References
- Utah S.B. 73 (2026 General Session), Online Age Verification Amendments(le.utah.gov).gov
- Challenge to Utah's App Store Accountability Act Voluntarily Dismissed Following Statutory Amendments(alstonprivacy.com)
- Utah Amends App Store Accountability Act (ASAA): Key Obligations Delayed Until May 6, 2027(wiley.law)
- Deseret News, "Aylo sues Utah for closing VPN loophole on porn age verification" (May 13, 2026)(deseret.com)
- Electronic Frontier Foundation, "Utah's New Law Targeting VPNs Goes Into Effect May 6th" (updated with the September 3, 2026 non-enforcement agreement)(eff.org)