- NordVPN warns rules of Utah’s age verification bill on VPNs are unworkable
- The bill was agreed on March 4, with enforcement expected in May 2026
- NordVPN is now urging lawmakers to “pause and convene” with experts
Utah lawmakers are a step closer to restricting VPN usage in a way that NordVPN says would “punish lawful users who care about their privacy” across the globe.
The warning follows the passage of Utah’s Online Age Verification Amendments — formally Senate Bill 73 — which cleared both chambers of the state legislature on Wednesday, March 4,
With enforcement expected to begin in May 2026, the bill requires online service providers to age-gate content deemed harmful to minors.
However, the legislation also makes companies liable for age-gating any user physically located in Utah, regardless of whether they are using a virtual private network or a proxy server.
NordVPN argues this creates an “unresolvable compliance paradox” for responsible operators.
How the law targets VPN users
Under the current text, any person physically located in Utah must undergo mandatory age checks to access adult-only content. Crucially, the law requires service providers to verify the age of users even when they use a VPN or similar tool to spoof their geolocation.
The bill also prohibits commercial entities that host “a substantial portion of material harmful to minors” from facilitating or encouraging the use of VPNs to bypass these checks. This includes a ban on providing instructions on how to use such services to access their websites.
NordVPN’s resposne
While VPN providers are not the primary targets of the law, NordVPN has strongly criticized the proposal as technically unworkable.
In a statement shared with TechRadar, the firm argued that blocking all known VPN and proxy IPs in Utah is “technically impossible” because providers constantly add new addresses and no comprehensive blocklist exists.
The VPN giant also warns that attempting to comply would have serious consequences for lawful users worldwide. As currently written, the bill does not appear to give adult sites the option to simply exit the Utah market to avoid the rules.
Instead, the only remaining option appears to be age-verifying every visitor globally, regardless of their actual location. NordVPN warns this would subject “millions of users to invasive identity checks they have no legal obligation.”
This isn’t the first time US lawmakers have included provisions that impact VPN users in age verification bills. While Wisconsin recently scrapped similar rules that would have effectively banned VPNs in the state, Utah’s proposal is more far-reaching, with a potential impact that stretches beyond state lines.
While NordVPN supports the intent of protecting children online, it is now urging Utah legislators to pause and consult with experts before the May 2026 deadline.
The firm warns that good intentions written into “technically unenforceable law” fail to protect minors and instead “simply punish lawful users who care about their privacy, globally.”
Ultimately, NordVPN argues that any legislation that cannot be complied with is not a workable measure. As the company puts it: “It is a liability trap.”
We test and review VPN services in the context of legal recreational uses. For example: 1. Accessing a service from another country (subject to the terms and conditions of that service). 2. Protecting your online security and strengthening your online privacy when abroad. We do not support or condone using a VPN service to break the law or conduct illegal activities. Consuming pirated content that is paid-for is neither endorsed nor approved by Future Publishing.
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!
https://cdn.mos.cms.futurecdn.net/i5GRReqaUfe7cJjs88tHwf-2119-80.jpg
Source link
chiara.castro@futurenet.com (Chiara Castro)
