RN
The blackout was not imposed on the company. It chose it.
That distinction is the whole story, and the version of this article that ran at the time got it backwards — describing the state as having failed to supply adequate age-confirmation machinery, as though verification were something a government provides and Nebraska had come up short. It is the opposite. The statute puts the obligation, and the liability, on whoever publishes the content.
What actually happened
Nebraska's Legislative Bill 1092 passed 35–3 in April 2024. It requires commercial sites distributing material deemed harmful to minors to verify that visitors are adults — in practice by having them upload identity documents — and it creates liability for publishers who do not. When the law came into force in mid-July 2024, Aylo, which operates Pornhub and its associated brands, cut off access from Nebraska addresses rather than implement the check. Users in the state got a notice, then a wall.
Nebraska was not the first and did not stay unusual. By that point the company had already done the same thing in a string of states as comparable statutes took effect, and the map of where its sites work has been patchy ever since.
Why a company walks away from a state
Three reasons, and none of them is that verification is technically hard.
The liability sits on the publisher. A site that gets verification wrong is exposed to enforcement and civil claims. A site that leaves the jurisdiction is not. For an operator serving a national audience, withdrawing from one state is a smaller number than an open-ended legal exposure inside it.
Compliance means holding identity documents. Site-level verification requires collecting government ID from adults who want to look at legal material, and then either storing it or contracting someone else to. That is a permanent breach-risk liability attached to the most sensitive category of browsing data anyone has. The company's stated objection is precisely this, and its stated preference is for age checks performed once at the device or operating-system level, where no website ever receives the document. Whether that is principled or convenient, it is at least a coherent position and it is the one it has argued publicly.
The traffic does not evaporate. It relocates. A law of this kind is only as effective as its coverage, and the operators most likely to comply are the large, identifiable, incorporated ones. Enforcement against the rest is the hard part, and until it happens the practical effect of a withdrawal is to move an audience from a company with a legal department to sites with neither compliance nor much interest in it.
The question underneath it, since answered
Throughout 2024 the constitutional status of these laws was genuinely open, which is why coverage at the time was so speculative about appeals and next moves.
It is not open now. On 27 June 2025 the Supreme Court decided Free Speech Coalition, Inc. v. Paxton, upholding the Texas age-verification statute by six votes to three. The majority, written by Justice Thomas, held that the law triggers intermediate rather than strict scrutiny and survives it, on the reasoning that the burden it places on adults' access to protected speech is incidental to a permissible aim of keeping minors away from material obscene to them. The dissenting justices — Kagan, Sotomayor and Jackson — would have applied strict scrutiny, treating it as a content-based restriction on adults.
That decision resolves the legal argument the Nebraska episode was suspended inside. The withdrawals of 2023 and 2024 were bets placed while the question was live; the question has now gone the other way, and the number of states with such statutes has grown accordingly.
The comparison that was drawn wrongly
The earlier article pointed to a 2020 dispute in the United Kingdom as precedent. The actual sequence is different and more instructive. Part 3 of the Digital Economy Act 2017 would have imposed age verification on pornography sites, but it was never brought into force — repeatedly delayed, then abandoned in 2019, largely over the same two objections raised in the United States: that the checks were trivially bypassed, and that they created a database nobody should be building. The duty returned in the Online Safety Act 2023, which repealed the older provisions and imposed age-assurance obligations under Ofcom to a "highly effective" standard.
So the British lesson is not that a company once withdrew and came back. It is that this exact policy was tried, dropped as unworkable, and reintroduced six years later in a stricter form — which is a much better guide to where the American patchwork is heading than any single state's blackout.
What it means in practice
If you are in a state with one of these laws, the sites still available to you are, disproportionately, the ones that decided compliance was cheaper than departure, plus everyone who is not paying attention. Neither group is selected for quality.
It is also worth noticing what the debate is not about. Nobody in it is arguing that minors should have access. The argument is entirely about who is made to hold your identity documents in order to prevent it, and how much of a permanent surveillance surface is a reasonable price. The device-level proposal exists because it answers that question differently, not because it answers a different question.
One practical footnote: subscription services have always required a payment instrument, which functions as a form of age assurance and has done since long before any of this legislation. That is not an endorsement — it is an observation about why the compliance burden of these laws has fallen hardest on free, advertising-funded platforms, and why they are the ones that turned the lights off.