Louisiana Mandates ID Verification for Pornography Online – 11 Other States Follow Suit

Posted on Mar 5, 2023 by Adina Matei

Preventing children from accessing adult material is well-intentioned, but politicians and legislators often go the wrong way about it. UK, Australian, and German authorities previously investigated implementing measures to prevent access to porn sites without some sort of age or ID verification. It didn’t work.

That didn’t stop Louisiana lawmakers from passing legislation that mandates online ID verification in early 2023. Inspired by the Louisiana porn restrictions, Eleven other states proposed similar bills, and in states like Virginia, Arkansas, and Utah they already passed the First Chamber.

Private Internet Access does not support this type of legislation and believes that collecting IDs for age verification is a recipe for disaster when it comes to data privacy.

Where It All Started: Louisiana Adult ID Verification (HB142)

Louisiana residents must provide their government-issued IDs to access websites that have more than one third pornographic material. This is because of the HB142 bill, which passed last year and came into effect shortly after New Years. Rep. Laurie Schlegel (R-LA) proposed it, and Gov. John Bel Edwards approved it in June 2022.

The bill makes websites liable for distributing harmful material to children. That said, harmful material appears to refer only to pornographic text and media. The second paragraph, presumably written by Rep. Schlegel, states: 

Due to advances in technology, the universal availability of the internet, and limited age verification requirements, minors are exposed to pornography earlier in age. Pornography contributes to the hyper sexualization of teens and prepubescent children and may lead to low self-esteem, body image disorders, an increase in problematic sexual activity at younger ages, and increased desire among adolescents to engage in risky sexual behavior. Pornography may also impact brain development and functioning, contribute to emotional and medical illnesses, shape deviant sexual arousal, and lead to difficulty in forming or maintaining positive, intimate relationships, as well as promoting problematic or harmful sexual behaviors and addiction.

The law doesn’t affect all websites though. Platforms are required to verify their visitors’ age, preferably through government-issued IDs, if they contain a “substantial portion” of pornographic material. The problem is that “substantial portion” is still not clearly defined. The law states:

Substantial portion” means more than thirty-three and one-third percent of total material on a website, which meets the definition of “material harmful to minors” as defined by this Section.

Websites with at least 33.3% adult material now require age verification. There’s no clear indication how the porn percentage is determined, and no explanation as to why sites with 33.2% or less are fine. It also seems to assume that government authorities should be able to access all content on a site to determine whether it falls below the 33.3% threshold, which is a whole other can of technical worms. 

The 33.33% doesn’t seem to be substantiated by much. It’s a copy of the UK’s Digital Economy Act’s threshold. As a reminder, this act proposed to implement age verification for adult sites, and prevent children from seeing pornographic material. It was later dropped due to privacy concerns and technological limitations.

Louisiana’s porn restriction law doesn’t seem to stir much privacy concerns among the general public yet.

In the meantime, popular adult websites like Pornhub already implemented age verification. Louisiana officials created a state ID verification app called LA Wallet compatible with driver’s licenses. Rep. Schlegel advised tech companies to use it for age verification processes, which sparked some debate on whether a government app should have access to this data.

PIA does not support this law, as it  poses significant concern over digital freedom and censorship. What’s more, if effective, bill HB142 could be the forerunner for other means to restrict online access, not just for children, but for adults as well.

At a federal level, Sen. Mike Lee (R-UT) pushed Internet Obscenity Definition Act (IODA) and Shielding Children’s Retinas from Egregious Exposure on the Net (SCREEN) Act in December 2022. The acts aim to define obscenity on a national level, and require all adult websites to implement age verification and restrict access to minors. 

IODA proposes to define obscene content based on the Communications Act of 1934. Given that the act is almost a century old, it might not be the best basis for laws in our digital world. With our current technology and practices, these laws inevitably mandate privacy-invasive features that can be exploited or abused. 

Eleven More States Push for Online ID Verification

Louisiana paved the way for online ID verification, and since then multiple copycats of bill HB142 made their way into legislation. We’ve seen this happen predominantly in the South with bills that mimic the same vagueness of 33.3% threshold.

States Considering Online ID VerificationBill Name(s)Bill Passed First ChamberDeadline to Pass
LouisianaHB142✔️Passed
FloridaSB 472May 5, 2023
KansasSB 160, HB 2301May 22, 2023
South DakotaSB 192March 27, 2023
West VirginiaHB 3339March 11, 2023
ArkansasSB 66✔️May 1, 2023
MississippiHB 1315, SB 2346✔️April 2, 2023
VirginiaSB 1515✔️February 25, 2023
CaliforniaAB 1501September 15, 2023
UtahSB 287✔️March 3, 2023
IowaHF 489April 28, 2023
KentuckyHB 476March 30, 2023

Some states seem adamant on pushing the bill as fast as possible. For example, Virginia introduced it January 20, and passed it February 7 in the Second Committee seemingly record time. Since the bill passed both chambers within the established deadline, we now have to wait until March 27 to see if the Governor signs it into legislation.

Utah also seems to be in a rush to pass its own bill. First introduced on February 3, 2023, the bill already passed both chambers. Proponents also claim that third-party verification would be safe enough.

Ben Winslow tweet about the Utah age verification bills

The state of Utah seems to go through a particularly rough time with bills aimed at regulating internet consumption. Sen. Michael McKell introduced SB 152 around the same time. The bill would force social media platforms to give parents access to their children’s accounts. Worse yet, social media platforms would be responsible for not letting minors be online between 10:30 p.m. and 6:30 a.m.

The Arkansas and Mississippi bills are also dangerously close to passing. At the opposite end of the spectrum, we have Florida and Mississippi claiming that, if passed, the law wouldn’t go into effect until July 2023.

Other committees appear not to be convinced about the verification ID being reasonably implemented and preferred to defer the vote. This was the case with South Dakota, despite the bill’s sponsor Rep. Castleberry’s best arguments.

This is not your daddy’s Playboy. Extreme, degrading, and violent pornography is only one click away from our children.

Rep. Jessica Castleberry (R-SD)

Proponents of the age verification bills have started to adopt the phrase “public health crisis” when talking about the effect harmful online material can have on young minds. This is the case in Arkansas and South Dakota.

Lobbyists opposing the bill are wary of this term being used to instill a sense of urgency in passing the bills. The Covid-19 pandemic recently showed how emergency laws can be enacted to tackle a public health crisis. That said, we have minimal studies on the effects of pornography on teens and not sufficient data to classify the phenomenon as a public health emergency.

By this metric, we don’t have enough evidence these bills would have a beneficial impact on youth. But we do have evidence that their implementation would be a serious privacy concern.

Collecting IDs Is a Disaster for Your Privacy

Sites like PornHub say they don’t collect ID data. But the data age verification apps generate is very attractive to advertisers, data broken, and government authorities. By default, age verification systems collect a lot of data about you. Not only do they store your information like name, date of birth, and address based on government-issued documents, but they collect your every authentication. 

This means that these systems know when you watched porn, gambled online, or accessed similar adult-only content. Despite promises that they don’t trace your activity outside their scope, third-party actors can correlate that with your IP address and paint an accurate picture of your browsing history.

We also need to consider the implications of security. Age verification systems need to be secure enough to protect user data and prevent data breaches. As the Ashley Madison data breach showcased, privacy is safety. Data breaches have tangible aftereffects on individuals and businesses alike.

Online age verification is a complex matter, laden with lackluster and inefficient proposals and implementations. These systems are either invasive like facial recognition and ID scanning, or easily circumvented like self-declaring the date of birth. With no palpable middle ground can these systems be effectively implemented to protect children online?

A 2022 study found that over half of parents are willing to make exceptions and let children bypass age restrictions provided they have oversight over how their children handle online content. While the study didn’t look at adult material specifically, it does show that most parents feel safer determining their own rules and monitoring systems. Less than a quarter of parents felt comfortable with age verification, be it with their children’s ID or their own. Parents overwhelmingly deemed it invasive.

Intrusive digital regulations are a slippery slope. As champions of online freedom and security, we’re committed to safeguarding our users’ data. Federal and state legislation is more often than not ambiguous, so we’re giving you the option to take matters into your own hands. 

This credo fueled us to our 50 Servers in 50 States milestone. Private Internet Access lets you secure your data and protect your browsing habits with server locations in all 50 US states. We use 256-bit AES to encrypt your internet traffic, and keep you safer when you browse the internet.

If you’re looking to access any type of content online with peace of mind, you can connect to our servers in US states not affected by age verification bills. We also provide servers in 83 other countries that you can easily connect to. Besides offering digital privacy, our servers have no bandwidth limitations, no data caps, and no restrictions on VPN download speeds, so you can stay protected as long as you want.  

Be Vigilant About Your Online Data

Collecting IDs for age verification goes against PIA’s mission to offer online security and freedom, and the privacy risks for individuals cannot be understated. 

Online safety for children is a discussion everyone needs to have. The internet is riddled with digital threats and inappropriate content, and we should work towards building a safer experience for children. But this is a task best handled by families in their homes, not through pornography ID laws like in Louisiana. Even when legislation is leveraged for the purpose, its text should better define what is considered “harmful material,” not to mention do a better job of protecting individuals’ online privacy.

Parents that proactively have discussions with their children over online threats seem to have the right idea. Teaching children how to be responsible digital citizens enables them to have a sense of autonomy as opposed to blind restrictions. Unsafe features that pose privacy risks shouldn’t be the price we need to pay for online safety.

Parental controls, privacy settings, supervised social media accounts, VPN usage, and firewalls to block malicious and inappropriate domains are useful tools to protect your children in the digital age. It’s not a law that will ultimately protect the children in Louisiana or in any other state, and adult Louisiana residents shouldn’t have to expose themselves to online threats because of the content they consume.  Louisiana’s porn-blocking attempts can cause more harm than good.