Congress mandates age verification for porn sites—but at what privacy cost?

What it does

This bill requires adult websites hosting pornographic content to implement age-verification technology within one year to prevent minors from accessing such material. Covered platforms must use technology to verify users are adults and block minors from accessing pornographic content, though they can choose their own verification method. The FTC will audit compliance and enforce violations as unfair or deceptive practices.

Why we flagged it

The bill's operative mechanism is a mandatory age-verification requirement for adult platforms, framed as child protection. The civic tension is not hidden—it is stated plainly—but the bill does not adequately address the privacy and data-security costs of mass age verification, making it a genuine mixed-impact measure rather than a straightforward public-health win.

What the text implies

• Age-verification systems will require platforms to collect, link, and retain personal data (including IP addresses and device identifiers) for all users attempting to access adult content, creating a persistent surveillance infrastructure that extends far beyond the stated child-protection goal.
• Third-party age-verification vendors will become intermediaries holding sensitive user data; the bill does not prohibit data sale, secondary use, or sharing with law enforcement, creating privacy risks independent of platform compliance.
• The definition of 'harmful to minors' is broad and subjective (appeals to prurient interest, patently offensive depictions), potentially capturing educational, artistic, or political content and incentivizing over-blocking by platforms to avoid FTC enforcement.
• Platforms may shift liability to third-party verification services, but the bill explicitly states this does not relieve the platform of liability, creating dual-enforcement exposure and potential litigation over data-security breaches.
• The 180-day FTC guidance window and 1-year compliance deadline are aggressive; platforms may deploy immature or privacy-invasive verification technologies to meet the deadline, with limited time for security hardening or privacy-by-design review.

Section numbers refer to the bill text the analysis read — linked under Primary records below.

Who it affects

The bill pursues a legitimate public-health goal—protecting minors from pornography exposure—supported by congressional findings on documented harms. However, the age-verification mandate creates concrete privacy and data-security risks for all users (not just minors), as platforms must collect, process, and retain personal data tied to device identifiers to verify age. The bill's data-minimization language is weak, and third-party verification vendors introduce additional exposure vectors. The

Who stands to gain

• age-verification technology vendors
• identity-verification service providers
• data-security and cryptography firms
• adult content platforms (if they can monetize verification data or pass costs to users)

Named in the bill

Federal Trade Commission (FTC), interactive computer services, age-verification technology vendors, Comptroller General, Communications Act of 1934, Federal Trade Commission Act, Telecommunications Act of 1996, Children's Internet Protection Act

Where it stands

27 cosponsors: 27 Republicans.

• Feb 26, 2025 — Introduced · Congress.gov: “Introduced in House”
• Feb 26, 2025 — Referred to House Committee on Energy and Commerce · Congress.gov: “Referred to the Subcommittee on Commerce, Manufacturing, and Trade”
• Dec 11, 2025 — Markup held in committee · Congress.gov: “Subcommittee Consideration and Mark-up Session Held”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.

Money around this bill

10 lobbying clients named this bill on 14 disclosure filings across 2 quarters, Dec 2025 to Jun 2026. Those filings disclosed $13,939,000 in lobbying spend. A filing names 22 bills on average, so that figure is what each filing reported, not a share belonging to this bill.

More lobbying clients named this bill than 91% of bills with at least one filing.

Mary Miller, the sponsor, reported $145,130 in PAC receipts in the 2026 cycle.

• Google Client Services LLC — $6,920,000 on 2 filings
• Meta Platforms, Inc. and Various Subsidiaries — $5,990,000 on 1 filing
• News Media Alliance — $475,000 on 1 filing
• Technet — $160,000 on 2 filings
• Ncta - the Internet & Television Association — $130,000 on 1 filing

Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.