\n
![](\"https:\/\/gizmodo.com\/app\/uploads\/2026\/04\/teens-social-media-smartphones-1280x853.jpg\")
<\/p>\n
\n<\/p>\n
Governments around the world, including dozens of U.S. states, have increasingly passed laws requiring some form of age verification to access certain types of online content, usually pornography. Australia has even gone as far as banning social media for teens under 16, while countries like Spain, Indonesia, and Malaysia are considering similar restrictions.<\/p>\n
But as these laws continue to spread, so has a simple workaround: virtual private networks, or VPNs.<\/p>\n
Now, Utah is the first state in the U.S. to officially try to close that loophole. On Wednesday, a new law known as the Online Age Verification Amendments will go into effect in the state, and privacy advocates are not happy about it.<\/p>\n
\u201cAttacks on VPNs are, at their core, attacks on the tools that enable digital privacy. Utah is setting a precedent that prioritizes government control over the fundamental architecture of a private and secure internet, and it won\u2019t stop at the state\u2019s borders,\u201d the Electronic Frontier Foundation (EFF) wrote in a post last week about the law.<\/p>\n
The new law adds two new restrictions related to VPNs.<\/p>\n
First, the law states that a person is considered to be accessing a website from Utah if they are physically located in the state, regardless of whether they use a VPN or any other method to hide their location.<\/p>\n
The EFF warns that holding companies liable for verifying the age of users in Utah, including those using VPNs, is technically unrealistic because websites generally cannot reliably determine a VPN user\u2019s actual location. According to the group, that could force websites to either \u201cban all known VPN IPs, or to mandate age verification for every visitor globally.\u201d<\/p>\n
And even that may not work very well as VPN providers constantly add new IP addresses, making it virtually impossible to comprehensively block all VPN traffic.<\/p>\n
Still, details on how the law will be enforced remain murky since websites are only expected to act if they become aware that a person physically located in Utah is accessing the site through a VPN.<\/p>\n
Additionally, the law also states that websites hosting \u201ca substantial portion of material harmful to minors\u201d are prohibited from encouraging the use of VPNs.<\/p>\n
\u201cThis raises significant First Amendment concerns, as it prevents platforms from providing basic, truthful information about a lawful privacy tool to their users,\u201d the EFF wrote.<\/p>\n
The law is unprecedented in the internet\u2019s new age-verification era, but privacy advocates worry it could also become a model for lawmakers elsewhere looking to crack down on VPNs and other tools used to bypass online restrictions.<\/p>\n
Last year, a U.K. government official also called for tougher rules to stop children from using VPNs to get around the country\u2019s online safety laws.<\/p>\n<\/p><\/div>\n