Regulating the Digital Frontier: Evidence from Online Adult Content

 The regulatory context for online adult content is part of a broader global trend where governments are increasingly targeting digital platforms to restrict access to content, often motivated by concerns regarding addiction, misinformation, or harms to minors. This larger landscape of online activity regulation includes diverse efforts such as China’s broad censorship regime, targeted bans on specific platforms like TikTok in India or Twitter/X in Brazil, and social media restrictions for minors in Australia.

Within this broader environment, the regulation of online pornography in the United States has recently shifted toward state-level age verification mandates, which represent some of the most aggressive attempts to regulate online content in the country.

The U.S. Regulatory Framework

The current regulatory push began in earnest with Louisiana’s House Bill 142 on January 1, 2023, which established a template subsequently adopted by 24 additional states. Key features of this regulatory model include:

• Verification Requirements: "Commercial entities" that distribute material "harmful to minors" on websites where such content constitutes a "substantial proportion" must implement reasonable age verification methods. These methods typically involve uploading a government-issued ID, providing credit card information, or using biometric tools like facial recognition.
• Enforcement and Penalties: Enforcement primarily occurs through the court system, where state attorneys general or private individuals can sue non-compliant websites. Penalties for failure to comply are substantial, often reaching thousands of dollars per day of violation.
• Legal Precedent: While previous attempts to protect minors from online obscenity were struck down (e.g., Reno v. ACLU in 1997), the legal landscape shifted in June 2025 when the Supreme Court upheld Texas's age verification law in Free Speech Coalition, Inc. v. Paxton, affirming the government's interest in protecting minors.

Regulatory Challenges and "Leakage"

The sources highlight that regulating online activity presents unique challenges not found in offline markets, leading to various forms of "leakage" that can mute a policy's impact:

• Platform Non-compliance: Dominant sites like Pornhub have chosen to block access entirely in many states to lead legal battles and avoid public relations crises. Conversely, other major competitors like XVideos and XNXX, headquartered abroad, have continued to operate without verification requirements, relying on the practical difficulties of cross-border enforcement.
• Technological Circumvention: Digital consumers can often bypass state-level restrictions using Virtual Private Networks (VPNs) to mask their location. The sources find that roughly 30% of pre-restriction browsing time persisted through such circumvention.
• Alternative Paradigms: Due to these challenges, some proponents—including Pornhub’s parent company, Aylo—advocate for "device-based" age verification. In this model, smartphones or computers would collect and transmit verified age information directly to websites, potentially reducing VPN-based evasion, though this would not prevent users from substituting to non-compliant sites.

Ultimately, the effectiveness of these regulations depends heavily on the ease of technological circumvention and the availability of non-compliant substitutes, factors that policymakers must consider when designing digital regulations for any content category.

Platform responses to age verification laws vary significantly, often dictated by a site's market position, geographic location, and history of legal scrutiny. In the broader context of regulating online activity, these diverse responses create a fragmented landscape that significantly affects the efficacy of any given policy.

The sources identify three primary categories of platform response:

1. Total Access Blocking

The most prominent response was led by Pornhub, the world's most visited adult website, which chose to block access entirely for all users (both adults and minors) in most states that enacted these laws.

• Motivations: The sources suggest Pornhub chose this "aggressive" stance to lead the industry's legal battle against the mandates and to avoid high-profile public relations crises, especially given its history of scrutiny regarding content moderation.
• Legal Strategy: By blocking access, the company could more clearly challenge the laws' constitutionality without risking the massive daily fines (up to $5,000–$10,000 per violation) stipulated in state legislation.

2. Active Compliance

Other platforms chose to remain accessible by implementing the "reasonable age verification methods" required by the laws.

• Mechanism: These sites typically utilize third-party verification providers to handle government-issued IDs, credit card data, or biometric age estimation (such as facial recognition).
• Rationale: This approach allows sites to maintain their user base and revenue streams in regulated states while shifting some of the legal and data-privacy risks to specialized verification firms.

3. Strategic Noncompliance

The sources highlight that a major portion of the adult content market—notably XVideos and XNXX, the second and third most visited sites—chose not to implement any verification systems.

• The "Enforcement Gap": These sites often rely on the practical difficulty of cross-border enforcement. For instance, Pornhub’s parent company (Aylo) is based in Canada, while the parent company of XVideos and XNXX (WGCZ Holding) is based in the Czech Republic, creating jurisdictional hurdles for state attorneys general.
• Impact on Regulation: This noncompliance is a primary driver of "leakage." The study found that 49% of pre-law browsing time was spent on websites that never restricted access, meaning nearly half of the regulated activity continued completely unaffected by the new laws.

Implications for Online Regulation

These varied platform responses demonstrate the difficulty of regulating a global digital frontier with local laws. When a dominant, compliant platform like Pornhub exits a local market, users do not necessarily stop the behavior; instead, they often substitute toward noncompliant competitors (accounting for 10% of baseline consumption) or use VPNs to access the blocked sites (accounting for 31% of baseline consumption). Consequently, the effectiveness of digital regulation depends less on the law itself and more on the uniformity of platform compliance and the ease with which users can find substitutes.

In the broader context of regulating online activity, the sources highlight that digital consumers have a unique ability to adapt to restrictions, making the ultimate impact of such policies uncertain. When U.S. states implemented age verification laws for adult websites, user behavioral responses were characterized by four distinct channels: noncompliance, circumvention, substitution, and cessation.

According to the study, for every 100 hours of pornography consumed before the laws took effect, the breakdown of post-law behavior was as follows:

1. Noncompliance (50 Hours)

The largest share of consumption persisted simply because many websites did not implement the required restrictions. Approximately 49% of pre-law browsing time was spent on websites like XVideos and XNXX that chose not to comply with state mandates, allowing users to continue their habits without interruption.

2. VPN-Based Circumvention (30 Hours)

Users frequently bypassed geographic blocks by using Virtual Private Networks (VPNs) to mask their physical location.

• Persistent Access: Roughly 31% of baseline consumption persisted through this method.
• Young Adult Adoption: The sources find that young adults (aged 18–24) engaged in more VPN-based circumvention than older age groups, likely due to higher technological sophistication.

3. Platform Substitution (10 Hours)

When dominant sites like Pornhub blocked access, users often migrated to noncompliant competitors.

• Market Shift: Approximately 10% of baseline consumption was substituted from compliant sites to those that remained open.
• Concentrated Migration: Most of this traffic flowed to the remaining top-tier noncompliant sites rather than "fringe" adult websites.

4. Cessation (10 Hours)

A minority of users stopped visiting adult websites altogether in response to the regulations.

• Overall Impact: The sources estimate that total pornography consumption fell by approximately 10% (or roughly 0.5 minutes per week for the average user).
• Subgroup Differences: Cessation was notably higher in households with children when using desktop computers, which may suggest that the laws were more effective at reducing access for minors or that parents were more likely to stop using the sites on shared devices. Conversely, cessation was lower among young adults compared to those aged 25–44.

Implications for Digital Regulation

These behavioral responses demonstrate that "leakage"—the continuation of targeted activity through alternative means—significantly mutes the impact of online regulations. Across every subgroup studied, total consumption fell by 15% or less, indicating that while access restrictions did reduce overall activity, the majority of pre-existing behavior persisted through technological workarounds or shifting to alternative platforms. This suggests that the effectiveness of digital regulation depends heavily on the cost of circumvention and the availability of non-compliant substitutes.

In the larger context of regulating online activity, the methodology employed in the sources stands out by using high-frequency, individual-level panel data to overcome the limitations of previous studies that relied on aggregate traffic or search trends. This approach allows for a granular decomposition of user behavior—specifically noncompliance, circumvention, substitution, and cessation.

The research methodology can be broken down into three main components:

1. Data Source and Scope

The study utilizes data from Comscore, a media measurement firm, covering a rotating panel of approximately 550,000 U.S. internet users from January 2022 through December 2024.

• Individual-Level Tracking: The data tracks specific "machines" (desktop and mobile devices), recording the exact timestamp, duration, and number of pages for every website visit.
• Stable Geographic Assignment: Crucially, geographic location is assigned based on stable demographic information rather than contemporaneous IP addresses. This allows researchers to observe browsing activity even when a user is using a VPN, a capability missing from methodologies that rely on IP-based tracking like Google Trends.
• Comprehensive Categorization: Researchers tracked activity across more than 200,000 adult websites, manually coding the top 25 sites as "compliant" or "noncompliant" based on whether they implemented state-level restrictions.

2. Empirical Strategy: Stacked Difference-in-Differences

To identify the causal effect of regulation, the authors employ a stacked difference-in-differences (DiD) design.

• Exploiting Staggered Rollouts: The model takes advantage of the fact that age verification laws and subsequent website shutdowns (primarily Pornhub's) occurred at different times across 25 states.
• Event Study Framework: The analysis compares trends in pornography consumption in treated states to control states (those where shutdowns had not yet occurred or never occurred) during a window ranging from 16 weeks before to 8 weeks after a shutdown.
• Fixed Effects and Clustering: The researchers include machine-by-cohort and calendar-week-by-cohort fixed effects to control for individual habits and time-varying shocks. Standard errors are clustered at the state level to ensure statistical robustness.

3. Data Cleaning and Limitations

The methodology includes specific technical choices to ensure data quality and acknowledges inherent limitations:

• Winsorization: To prevent results from being skewed by extreme outliers (unusually long browsing sessions), all session durations were winsorized at the 95th percentile.
• The "Private Browsing" Gap: A noted limitation is that the data does not capture visits made in private browsing modes (e.g., Chrome’s Incognito Mode). However, the authors argue this does not bias their results because private browsing does not circumvent state-level IP blocks.
• Adult-Only Focus: Because the panel consists entirely of adults, the methodology measures how intended users (adults) respond to laws meant to protect minors.

Methodological Advantages over Prior Research

The sources emphasize that this methodology improves upon existing literature in several ways:

• Quantifying Minutes: Unlike Google Trends, which uses normalized search intensity, this study measures the exact number of minutes spent on platforms.
• Substitution Patterns: It can track substitution to the "full set" of alternative websites rather than just a few popular ones.
• Demographic Heterogeneity: The individual-level data allows researchers to see how responses differ by age, gender, and the presence of children in a household.

The sources perform a heterogeneity analysis to understand how different subgroups of users and device types respond to age verification mandates. This analysis is critical because it examines whether the regulations—intended to protect minors—actually affect users differently based on their age, technological literacy, or household environment.

Key findings from the heterogeneity analysis include:

Age and Technological Sophistication

The researchers focus on young adults (aged 18–24) as a proxy for how minors might respond, given that direct data on minors was unavailable.

• Lower Cessation: Young adults exhibited less cessation (stopping usage) compared to the 25–44 age group.
• Higher Circumvention: This group engaged in significantly more VPN-based circumvention, which the authors attribute to their likely higher level of technological sophistication.

Households with Children

To assess the impact on potential minor access, the study compared desktop machines in households with children to those without.

• Increased Effectiveness: Cessation was larger in households with children present than in those without.
• Interpretations: This could suggest the laws were more effective at reducing access for minors on shared family computers, or that parents in these households were more likely to cease usage altogether once the barriers were implemented.

Device Type and Usage Intensity

The analysis also looked at how the platform (mobile vs. desktop) and the user's baseline habits influenced their reaction:

• Mobile vs. Desktop: Mobile devices showed significantly higher baseline usage (18.8 minutes per week) compared to desktops (2.3 minutes per week). However, desktop users showed higher rates of cessation (approximately 13%) compared to mobile users (approximately 4%) [Figure 3, 95].
• Heavy vs. Moderate Users: Users categorized as "Heavy" Pornhub consumers showed greater cessation in percentage terms than "Moderate" users [Figure 3, 95].

Core Takeaway: The "Leakage" Consistency

Despite these variations, a primary takeaway from the heterogeneity analysis is the consistent attenuation of the law's impact across all groups.

• Universal Persistence: In every subgroup studied—including different genders, income levels, and household types—total pornography consumption fell by 15% or less.
• The Power of Substitutes: Regardless of the demographic, the availability of noncompliant sites and the ease of VPN circumvention provided enough "leakage" to ensure that the vast majority of pre-law browsing behavior persisted.

Ultimately, while certain groups (like young adults) are more adept at circumvention, the presence of close substitutes with low circumvention costs effectively muted the policy's impact across the entire user base.

The sources acknowledge several limitations inherent in their analysis of online adult content regulation, primarily stemming from data constraints and the scope of the study. These limitations are critical for understanding how the findings—such as the observed 10% reduction in total consumption—apply to the broader landscape of digital regulation.

Data Representation and Tracking Constraints

The study relies on a panel from Comscore, which presents specific challenges regarding how accurately it reflects the general population:

• Sample Selection: The Comscore panel is a selected sample of internet users and may not be perfectly representative of the U.S. population in terms of demographics and device-type usage.
• Awareness of Tracking: Because panelists are aware they are being tracked, their browsing behavior—specifically for sensitive content like pornography—might differ from that of the average unobserved user.
• Private Browsing Gap: The data does not capture visits made in private browsing modes (e.g., Google Chrome’s Incognito Mode). While the researchers argue this does not bias the results because private browsing cannot bypass geographic IP blocks, it does mean the study understates total consumption both before and after the laws took effect.

The "Minor" Data Gap

Perhaps the most significant limitation given the regulatory intent is the absence of direct data on minors.

• Primary Target Missing: The age verification laws were specifically designed to protect children under 18, yet the Comscore panel consists entirely of adults.
• Indirect Proxies: Researchers had to use young adults (18–24) and households with children as indirect proxies to infer how minors might react to the mandates. Consequently, the study's estimates reflect the impact on adult users rather than the primary population the laws aim to protect.

Geographic and Technical Measurement

The methodology for assigning users to specific states introduced potential for minor measurement errors:

• Market Mapping: Comscore Markets do not align perfectly with state lines. Researchers had to assign "machines" to states based on population majorities within overlapping markets, which could lead to errors in geographic assignment.
• VPN Identification: While the study can observe browsing activity even when a VPN is used (because geographic assignment is based on stable demographic data), it does not have a direct indicator for whether a VPN is active during a specific session. The persistence of activity on blocked sites like Pornhub is used as a proxy for circumvention.

Scope and External Validity

The sources also highlight limitations regarding the scope of their economic conclusions:

• Welfare Effects: The study documents a reduction in consumption but does not assess the welfare effects of these changes on either the consumers or society at large.
• Supply-Side Exclusion: The analysis focuses exclusively on the demand side (user behavior) and does not examine how these regulations affect the production of adult content or the performers involved.
• Generalizability: While the study identifies universal "leakage" channels like substitution and circumvention, the quantitative estimates are local to the adult website market and may vary in other regulated digital sectors like social media or online gambling.