Nearly four years after Louisiana became the first US state to require age verification on pornography sites, it remains an outlier among its neighbors: Pornhub still operates there. More than half of US states have since adopted similar laws, but Louisiana's approach, built around a state-issued digital ID, has produced a different outcome than the blanket exits seen in Texas, Arkansas, and Mississippi.
A Law With Teeth, But Narrow Ones
Louisiana's framework rests on two statutes authored by state Rep. Laurie Schlegel. Act 440, effective January 1, 2023, requires commercial sites where more than a third of content is harmful to minors to verify every visitor's age. Sites can comply through a digital ID such as LA Wallet, a commercial system that checks government identification, or another method based on transaction data. The law also bars sites and verification vendors from retaining identifying information once access is granted, and it lets individuals sue if a minor accesses the content.
Act 216, which took effect in August 2023, added state enforcement. The attorney general must give a noncompliant site 30 days' notice before seeking fines of up to $5,000 per day, plus as much as $10,000 for each knowing violation and recovery of legal costs. Notably, the penalties apply only to platforms. Adults who view pornography commit no offense under either law.
Why Pornhub Stayed When Others Left
Aylo, the company behind Pornhub, YouPorn, RedTube, and Tube8, chose to block access entirely in Texas, Arkansas, Mississippi, and North Carolina rather than build age checks there. Louisiana was different because LA Wallet lets a site confirm a visitor is an adult without collecting or storing the identification itself, addressing the privacy concern that has driven Aylo's withdrawals elsewhere.
Even so, Aylo says traffic from Louisiana dropped sharply once verification began, as users migrated to sites without checks. In a 2026 letter to state officials, the company called such requirements "performative, ineffective and unenforceable" and urged lawmakers to reconsider. Attorney General Liz Murrill rejected that request, saying the state intends to pursue greater accountability rather than less.
The Privacy Trade-Off Behind Age Verification
LA Wallet, built by the Baton Rouge firm Envoc for the state's Office of Motor Vehicles, is designed so that a site receives only a yes-or-no answer about whether a visitor is over 18, without learning the user's identity or informing LA Wallet which site made the request. These privacy claims come from the company itself; no independent audit has verified them publicly. The tool also only works for Louisiana license and ID holders, leaving out-of-state visitors dependent on alternative verification systems that typically collect more data.
Those alternatives carry documented risk. AllPassTrust, Aylo's own verification service, retains account information, including IP addresses, for three years after a user's last login. In September 2026, IDScan.net, a Louisiana-based identity verification firm, confirmed a breach exposing names and driver's license numbers it had collected. The incident illustrates a structural problem with age-verification regimes: centralizing sensitive identity data creates a target, regardless of how well-intentioned the underlying law may be.
What Adults Can Do
A virtual private network addresses this by masking the IP address a site uses to determine which state's rules apply, routing traffic through a server elsewhere and encrypting the connection so an internet provider cannot see which sites were visited. Choosing the server location matters: Texas, Arkansas, and Mississippi have their own verification or blocking laws, so a server there won't help. New York, which has no such statute, is a common and effective choice.
Louisiana has no law restricting VPN use itself; all legal obligations fall on the websites. That said, a federal court has already paused a 2026 Utah rule that would have counted in-state VPN users as Utah visitors for verification purposes, a sign that courts are still working out how far states can reach into encrypted, rerouted traffic.
- Louisiana requires age verification via LA Wallet, ID-scanning services, or transaction-data checks.
- Penalties apply to noncompliant sites only, not to individual viewers.
- Pornhub remains accessible in Louisiana but blocked in Texas, Arkansas, and Mississippi.
- Third-party verification vendors have already suffered at least one confirmed data breach.
- VPN use to reach a server in a state without such laws is legal and unaffected by Louisiana's statutes.
Louisiana's experiment shows that age-verification laws don't have to drive platforms away, but they do shift the privacy burden onto whichever system verifies identity. Whether that system is a state-built digital wallet or a commercial ID scanner, the underlying tension remains the same: proving you're an adult online usually means trusting someone else with proof of who you are.