Utah regulators have agreed to temporarily suspend enforcement of new age-verification rules against Aylo Freesites, the parent company of Pornhub, as litigation over the state’s internet safety laws continues. The pause allows the adult-content platform to participate in upcoming rulemaking without facing immediate financial penalties, according to a statement from the Utah Division of Consumer Protection.
The agreement, reached in late August and announced on Thursday, applies exclusively to Aylo. It remains in effect until October or until a judge issues a final ruling on the company’s lawsuit, whichever occurs first. The arrangement is contingent upon Aylo maintaining its existing geofencing restrictions that block access to explicit content for users located within Utah.
Why It Matters
The standoff highlights the ongoing tension between state efforts to regulate online adult content and federal constitutional protections for interstate commerce. For Idaho residents and other Mountain West users, the outcome could set a precedent for how states enforce digital age-verification mandates when technology like virtual private networks (VPNs) obscures user locations.
Utah has been a national leader in restricting access to pornography, establishing an initial age-verification mandate in 2023. Aylo responded by blocking its free websites in the state. While some paid content remains available to users who provide identification, the company has argued that verifying VPN usage is technically unfeasible.
What Happened
In April, Aylo filed a lawsuit challenging a 2026 Utah law that requires age verification for all individuals accessing adult sites from within the state, regardless of whether they use location-masking technology. The complaint argues that the statute constitutes impermissible extraterritorial legislation.
“That is impermissible extraterritorial legislation: Utah is projecting its policy choices onto conduct occurring entirely outside its borders,” the April complaint stated, as first reported by idahostatejournal, as first reported by the Idaho State Journal.com.
The legal challenge cites violations of both the dormant Commerce Clause and the Foreign Commerce Clause. Aylo’s attorneys maintain that the new rule is fundamentally flawed because there is no reliable method to determine if a user is employing a VPN or proxy server.
Under the current law, violations can result in fines of up to $2,500 per infraction. The temporary forbearance agreement does not eliminate Aylo’s request to block enforcement of the law but provides a window for the company to engage with regulators during the rulemaking process.
By The Numbers
- $2,500: Maximum fine per violation under Utah’s new age-verification statute.
- 2023: Year Utah enacted its initial age-verification mandate for adult content websites.
- April 2026: Month Aylo filed its lawsuit challenging the state’s expanded regulations.
- Late August: When the Division of Consumer Protection and Aylo reached the enforcement pause agreement.
- October: The potential month when new division rules could take effect, ending the temporary suspension.
Zoom Out
The dispute reflects a broader national debate over internet regulation and state sovereignty. Utah’s approach has been aggressive, effectively pushing major adult-content providers out of the market or forcing them to implement strict identity checks. Aylo recently made “safe for work” non-explicit content available to Utah users, while some paid sites still distribute adult material to those who link identification during payment.
The Utah Division of Consumer Protection emphasized that the agreement is narrow in scope. “This agreement is strictly limited to AYLO and is contingent upon AYLO maintaining its geofencing restrictions within Utah,” the division stated, as first reported by the Idaho State Journal.
Regulators retain the authority to take enforcement action against other non-compliant entities. The state’s strategy appears focused on balancing consumer protection goals with legal realities, particularly regarding extraterritorial application of state laws.
What’s Next
The temporary suspension will end in October unless a court issues a final ruling sooner. Aylo can now participate in the rulemaking process without the immediate threat of liability. If the new division rules take effect and the lawsuit is not resolved, enforcement against Aylo could resume unless the company achieves a favorable judicial outcome.
The case underscores the difficulties states face when attempting to regulate digital platforms that operate across jurisdictional boundaries. As other states consider similar legislation, Utah’s legal battle may serve as a test case for the constitutionality of VPN-related age-verification requirements.
About the Author
