DISCLAIMER
This educational resource offers a general overview of age verification (AV) laws as they pertain to those who share art and cultural expression on their own websites. The materials here contain general information and are not applicable in all circumstances.
Note: This guide is not intended, and should not be used, as legal advice. If you are facing any legal risk or claim discussed here, you should consult with an attorney.
Published September 1, 2026
In the last four years, age verification (AV) laws have been introduced in many U.S. states with the declared goal of protecting minors (people age 17 and under) from online content legally defined as “harmful to minors.” “Harmful to minors” content is written or visual sexual material that may be considered legally obscene to minors, which the Supreme Court has ruled may be restricted without violating the First Amendment. Many of these laws require websites to restrict access to qualifying material, often by requiring websites to verify that visitors are adults before granting them access to the site. The exact requirements and thresholds vary by state. These laws can be civil (leading to a lawsuit) or criminal (leading to criminal charges or prosecution). Sometimes they only apply to commercial entities; some apply to individuals who operate websites. All of the laws apply specifically to the person or entity that operates and provides access to a website; these laws do not apply to individual platform users or online posters. Due to the borderless nature of the internet, website operators could find themselves subject to as many as 50 different sets of state legal rules, which are frequently changing. This is, put simply, a revolutionary shift in the openness of the internet.
Age verification laws stand to have cascading effects across the internet: undermining the privacy and anonymity of site visitors; creating a chilling effect and self censorship among artists and cultural institutions; and, as a result, restricting what netizens of all ages can access online.
Most importantly: both the text of these state laws and legal challenges to them are constantly changing in 2026, and as the challenges work their way through the courts, age verification laws will likely have serious consequences for website owners.
NCAC finds AV laws deeply concerning because they pose a threat to our privacy, anonymity, and right to access speech online. This resource addresses questions of urgent interest to artists and cultural organizations: what AV laws are; how they impact the online presence of artists and cultural organizations; and what artists and cultural institutions can do to practically protect themselves from legal risk. As a free expression organization, we want you to have the information to make choices that maximize your rights, speech, and art.
WHAT ARE AGE VERIFICATION (AV) LAWS?
Over the past four years, 27 states across the United States have implemented age verification laws.
These laws, originally intended to target “adult” websites, apply to all commercial websites—and in some states, even include non-commercial sites—that host content meeting the legal definition of “harmful to minors.” Different states have different legal thresholds for the allowable percentage of content that is considered to be “harmful to minors.”
Age verification protocols are intended to restrict minors' access to specific sexual content—not to make the underlying material inaccessible by adults. In Free Speech Coalition v. Paxton (2025), the Supreme Court upheld Texas's age-verification requirement for online sexual material, emphasizing that adults could still access the material after verifying their age. In that case, the Court ruled that adults do not have a right to access material that is harmful to minors without first having their age verified, meaning that online users have no right to access sexual material anonymously. (See “What is Harmful to Minors?” below.)
A common AV rule is the “33% Rule”: if 33% of the content on the site is considered “harmful to minors,” the site owner is required to block access to minors by implementing age verification protocols, such as photo ID matching. However, not every state establishes a numerical threshold for the amount of content requiring age verification for a given site. For example, Wyoming and South Dakota require certain platforms that create, host, or make available "harmful to minors" material to implement age verification without an express 33% content threshold.
While state laws generally regulate conduct within that state, AV laws regulating online content can pull out-of-state digital speech within their reach. A state can enforce its own laws if a user within that state can access a website with material “harmful to minors,” even if the website itself is hosted in a different state or country. So, for example, if an artist hosts their website in Rhode Island, and a minor in Arkansas—a state with age verification laws—can access “harmful content” as defined by Arkansas law, and the percent of “harmful content” on the artist’s website exceeds the threshold permitted by Arkansas law, the artist may be subject to lawsuits, civil fines, criminal charges, or other government action from the Arkansas Attorney General.
For artists, it is important to note that age-verification laws are generally not limited to a particular medium. Whether a work is considered “harmful to minors” depends on its content and how the law defines that content, rather than whether it is a photograph, text, painting, drawing, film, or another form of visual art.
WHAT IS "HARMFUL TO MINORS"?
“Harmful to minors” is a legal term describing content defined as legally obscene for minors. To be considered as legally harmful to minors the material has to meet all the criteria below.
- Taken as a whole, it appeals to the prurient sexual interest of minors.
- It is patently offensive under prevailing adult-community standards concerning what is suitable for minors.
- Taken as a whole, it lacks serious literary, artistic, political, or scientific value for minors.
The definition is a variation on the 1973 “Miller test,” which the Supreme Court established to determine what type of sexually explicit material is legally "obscene" (for everyone, including adults) and thus not protected by the First Amendment. “Harmful to minors” thus refers to material that is obscene for minors, which is a broader category of speech that the government can regulate without violating the Constitution.
Note: The test doesn’t cover all sexually explicit material, only material that is patently offensive by community standards and lacks serious literary, artistic, political, or scientific value for minors. If you believe that is somewhat vague and subjective, you are right: it is. In fact, the National Coalition Against Censorship was formed in the wake of the Miller test out of concern that the legal definition of obscenity was overbroad and subjective, and would increase censorship!
Key takeaway: Even when a significant amount of artwork on your website meets a state’s legal definition of being “harmful to minors,” that does not necessarily make it illegal to create the work or share it with other adults. It simply means that artwork may not be accessed by minors. Whether or how it is subject to age verification requirements online usually depends on the location of the site visitor, and the definition of “harmful to minors” used by that state.
ARE AV LAWS THE SAME EVERYWHERE IN THE UNITED STATES?
No. State AV laws differ regarding:
- The acceptable threshold for “harmful to minors” content. Many states require age verification when more than a “substantial portion” or one-third of a website's material would be considered “harmful to minors”-- but what the threshold is, and how it is determined, is not uniform across states.
- Who decides whether content requires age verification. Some states leave the question to courts, while others give power to regulators or enforcement authorities to decide.
- Who can bring an enforcement action. Depending on the law, enforcement may involve a state attorney general, another government official, private citizens, or some combination.
AV laws also differ because the very definition of “harmful to minors” content varies. This can impact:
- What material is covered. Different statutes list different qualifiers for what constitutes material that is “harmful to minors,” which may include: specific sexual acts, nudity, sexual excitement, and/or particular anatomical depictions.
- How the obscenity test is used. Some laws follow the three-part Miller test formulation; others use different or additional language.
- The age minimum required to access sites that require age verification.
- The interpretation of “offensiveness” and “serious value.” Educational, artistic, scientific, news, public-interest, or other material may receive different treatment depending on the state.
Note: This is a contested area of law. AV laws are being challenged in a number of ongoing lawsuits. Those lawsuits have had varying degrees of success, with courts pausing enforcement of AV laws in some instances. However, the Supreme Court in FSC v. Paxton ruled that states applying the “harmful to minors” variation of the Miller standard to websites hosting sexual content have the power to mandate age verification. It is important to stay informed on key changes that might impact your website or platform, especially if you control access to a website that may be subject to age verification requirements.
HOW DO I KNOW IF I CAN BE SUED OR CHARGED IN A STATE COURT?
As noted above, state AV laws differ in whether they apply to businesses, commercial entities, or anyone operating a website, including an individual. And while some AV statutes (like Tex. Civ. Prac. & Rem. Code Ann. § 129B.003, for example) are limited to businesses that sell products (see, for example, Texas), others (like Tennessee's, which includes criminal penalties) apply to both commercial entities and individuals, regardless of whether they engage in commerce.
One limitation on being sued or charged in state court is the concept of “personal jurisdiction,” which describes when a state actually has the ability to haul you into court—sometimes called “the long arm of the law.” Generally, courts may not subject you to penalties unless you intentionally target your conduct (here, a website) toward residents of that state in some way. While the concept of personal jurisdiction for laws regulating digital speech is in flux (after all, AV laws are a fairly recent phenomenon), as a general matter, websites that knowingly seek or target users from a specific state will be subject to personal jurisdiction there.
DO U.S. AV LAWS APPLY TO ARTISTS HOSTING WEBSITES OUTSIDE THE UNITED STATES?
Potentially, yes. Websites that are based or hosted outside the United States may be subject to U.S. state laws. Some laws are aimed at websites that can be accessed by users in that state, regardless of where the website or its operator are located.
Recently, Texas got a court to freeze the URL domain for an overseas pornography site that did not implement age verification required by Texas law. The site operator was based outside the United States, but the court was able to order the U.S.-based ".com" domain registry to lock the domain—meaning that no one anywhere on the globe can access that site.
This illustrates that operating or hosting a website outside the United States does not necessarily shield the site from U.S. enforcement. Where your domain is registered, where your hosting and service providers are located, and where your audience is located can all matter. At the same time, hosting or operating a site outside the U.S. may expose you to additional legal requirements in the country where you operate or host the site.
Some websites have already decided to block access to users within particular U.S. states rather than implement their age-verification requirements, demonstrating that these laws can affect websites and creators well outside the states that enacted them. If you live outside the United States, you should consider where your audience is located—not only where your website or business is based—when assessing whether these laws may apply to you.
WHAT DOES COMPLIANCE REQUIRE?
Compliance with age verification laws may be difficult for individual artists or smaller organizations less equipped to absorb the costs of technology, security, and legal help. Here are the basics of what you will need to know:
-
Age verification
Depending on the state, the law may require website operators to use “commercially reasonable” methods (like industry-accepted third-party tools), or a specific method to determine a user’s age. This may include government ID, facial age estimation, third-party verification services, or other forms of age verification. An industry group representing age verification companies has a list of possible third-party age verification providers.
-
Data compliance
Whatever form of compliance you choose, if it includes the collection of sensitive information such as documents, biometric data, or other personal information, you must know or understand how that information will be collected, used, stored, and deleted. Using a third-party provider does not absolve you of your responsibility to ensure the data privacy of your site visitors, and most statutes prohibit the retention of personal data after the age check is complete.
If incorporating AV tools on your site is not possible for you, alternatives exist. If you are unable or unwilling to fulfill a legal requirement to include age verification on your site, your other options include prohibiting site access to anyone living in a state with AV laws, or removing artwork that might meet the definition of “harmful to minors.”
Learn more in “What are my options if the content on my website meets the AV laws criteria?”
WHAT DOES THIS MEAN FOR ARTISTS & WEBSITES?
Age verification laws place the legal obligation on website or platform owners to ensure that—if the percentage of “harmful to minors” site content exceeds regulated thresholds—the site has age verification protocols in place. As an artist or cultural organization, this may apply if the site in question is yours—it does not pertain to the creators of individual artworks whose works are published on sites they do not own or control. So, if your artwork is shown on a website which is not your own, and that site is determined to require age-verification, it does not make you liable or in violation of age verification laws.
HOW DO I KNOW WHETHER MY SITE HAS MATERIAL LEGALLY DEFINED AS "HARMFUL TO MINORS"?
As a practical starting point, pay particular attention if your site contains substantial amounts of sexually explicit material—such as depictions of sexual acts, masturbation, visible erections or genitalia in a sexual context, or imagery that strongly emphasizes sexual activity. Generally speaking, nudity that is not sexually explicit is constitutionally protected even if minors can access it, especially when it has clear “artistic value,” a prong of the Miller test. However, it is still possible that some states might argue that exposure of certain body parts appeals to a minor’s “prurient interest in nudity.”
If a significant portion of your site could plausibly fall within a state's definition of “harmful to minors,” review specific state laws rather than relying on generalizations. If potentially “harmful to minors” material on your site exceeds 33%, the site almost certainly is subject to requiring AV protocols. If you have smaller percentages of potentially “harmful to minors” content, whether or not you need age verification depends on what the rest of your site contains. Calculating these percentages is also not straightforward, and is dependent on the state’s definitions, requirements, and methods for calculating that percentage. Because there is no objective formula for measuring a percentage of one’s speech as “harmful to minors,” it is most important that you be aware of the law’s thresholds, and have a thoughtful justification if you determine that your site has “harmful to minors” material but does not meet a certain mathematical percentage.
WHAT ARE MY OPTIONS IF THE CONTENT ON MY WEBSITE MEETS THE "HARMFUL TO MINORS" CRITERIA OF AV LAWS?
Depending on your situation, you may consider:
- Implementing age verification: Use a third-party or other method that meets the requirements of the state’s law. This site may be helpful in selecting a provider.
- Restricting access: Keep any content that potentially meets “harmful to minors” definitions behind a login, paywall, age-restricted section, or other access control where legally appropriate.
- Limiting or blocking access from certain states: You may be able to restrict access to your site by users in states where legal compliance is particularly burdensome. However, this will also prevent all users in those states from accessing your site. Additionally, it may not protect you if a minor uses a VPN to access your site.
- Removing relevant content: This remains a straightforward option for content that is likely to be interpreted as "harmful to minors.""
- “Padding” the site with anodyne content: This means adding content that will not be read as “harmful to minors” in order to impact the ratio of content.
- What if I choose not to comply? You may face civil or even criminal charges or penalties, depending on the state law that is applied. If this happens, you will need to obtain a lawyer and go to court. But—noncompliance is not the only form of resistance.
Whatever approach you use, we recommend combining it with advocacy so that your own self-censorship, and the shrinking of what is legally safe to publish online, does not happen in silence:
- Explain on your site and socials, or write an OpEd about why you are removing / restricting certain content for all users. Make it known!
- Submit a censorship report to DDA. We are tracking the impacts of AV laws on art so that we can speak to the issues facing artists online.
- Reach out to your public officials if you live in a state with AV laws and explain how they have harmed you, your art, or broader access to important speech.
Learn more in “Can I push back?”
HOW CAN I BLOCK USERS IN CERTAIN STATES FROM ACCESSING MY SITE?
If you decide to restrict access to users in states with age-verification laws, you can use IP geoblocking. For IP geoblocking, a service identifies the visitor’s approximate location from their IP address and blocks or redirects visitors from selected states. Services such as Cloudflare or Geotargetly provide tools and suggestions for blocking traffic based on geographic location.
Further, you can redirect users from blocked states to a custom explainer page. Here’s some sample language you may want to draw from if you decide to make such a page (inspired and adapted from those provided by Free Speech Coalition):
I’m Sorry.
I’ve had to block access from [State name].
Politicians in your state passed a law that requires you to submit your ID before visiting an art website like mine that has a specific percentage of content considered inappropriate for children.
As a result, I don’t feel that there are adequate protections in place for your privacy. And because I can be sued if I don’t institute age verification protocols, I have chosen to block the state entirely.
Mad? You should be and I am, too. There are much better ways to protect children online than forcing you to show your government ID. Consider contacting your state representatives.
Important: IP geolocation can be manipulated by the site visitor’s intentional use of VPNs, proxies, and mobile networks. Many state laws do not render the website provider liable if they exceed the minimum allowable percentage of “harmful to minors” content, but, like many AV laws, this varies state to state. Notably, in 2026 Utah passed a law requiring site providers to affirmatively verify user location even if the user has a VPN. If subject to this kind of law, some website owners may wish to ban all visitors using VPNs.
WHAT HAPPENS TO VERIFICATION DATA?
Age verification can involve sensitive personal information, particularly when systems use government IDs, biometric information, or other identifying information. The privacy risks depend on the verification method and the companies involved.
Before choosing a provider, find out:
- What information does it collect?
- Does your website receive the person's identity, or only an age result?
- How long is the information stored?
- Can the provider use it for other purposes?
- Is the information shared with third parties?
- What security measures protect it?
- What happens if the provider suffers a breach?
Where possible, NCAC advises to choose verification systems that minimize the personal information your site receives and retains. Some states also have specific privacy requirements, so data protection should be part of your planning from the beginning if you choose to hire a provider.
CAN I PUSH BACK?
- Be vocal and educate others about the negative impacts of AV on the cultural sector: On your website and social media platforms, contribute to public discussion around these laws and share how they are affecting you and your artwork or cultural programs. For example, Free Speech Coalition has created a popup that can be added to your site to alert users in specific states who have pending Age Verification legislation.
- Get involved: Pay attention to AV laws in your state. If you live in a state with AV laws, or if AV bills are under consideration in your state, write your representatives about the ways in which they threaten your expression, access to audiences, and privacy.
- Look for allies: Organizations working on free expression and digital rights can provide information, advocacy, and opportunities to participate in ongoing challenges to particular laws.
Learn more in “Who can I turn to for help?”
WHO CAN I TURN TO FOR HELP?
Age-verification laws are changing quickly, and some are being challenged in court. If you are unsure how a law applies to your website, consider consulting an attorney familiar with First Amendment, internet, or arts law.
You can also follow organizations working on these issues, including:
- Free Speech Coalition (FSC) — litigation and advocacy concerning sexual expression and age-verification laws.
- Electronic Frontier Foundation (EFF) — digital rights, privacy, free expression, and age-verification resources.
- Fight for the Future (FFTF) — advocacy around US legislation related to digital rights and online censorship.
- American Civil Liberties Union — litigation and advocacy concerning civil liberties, including freedom of expression.
- National Coalition Against Censorship (NCAC) — resources and advocacy concerning censorship and artistic expression.
These organizations can help you understand ongoing litigation and advocacy, but they are not substitutes for legal advice about your particular website.
If you are an artist or if you represent a cultural organization and have questions or concerns, we welcome you to reach out to us at dda@ncac.org.
AV requirements vary by state, and can apply differently depending on how “harmful to minors” is defined, the threshold for that content, the location of the user or the site, or what content may be exempted. This is a useful resource tracking different states’ laws that may help you decide what is best for you and your site.