Utah’s SB 73 and Age Verification Laws: What It Means for Digital Privacy and Your VPN

TL;DR: Utah has enacted Senate Bill 73 (SB 73), becoming the first US state to explicitly target VPN usage in relation to online age-verification mandates. Under the law, anyone physically located in Utah is legally treated as a resident regardless of what IP address their VPN displays, placing the compliance burden directly on website operators. 

Digital privacy legislation is rapidly evolving. On September 3, Utah’s Senate Bill 73 (SB 73)- also known as the Online Age Verification Amendments - officially took effect after a temporary court injunction expired.

The law requires commercial websites hosting adult material to verify user ages before granting access. However, SB 73 introduces a controversial legal framework regarding location masking: anyone physically located within Utah is legally classified as a Utah user, regardless of whether they use a VPN to mask their location.

While this legislation aims to impose strict financial penalties ($2,500 per violation) on websites, it raises significant questions about the future of digital freedom, general internet privacy, and how security tools operate.

Understanding Utah’s SB 73: How the Law Impacts Internet Users

To understand the friction surrounding SB 73, it helps to look at how location spoofing and age verification intersect under the new law:

• Physical Location Rules: Under SB 73, if a user physically in Salt Lake City connects to an encrypted VPN server in Germany or the Netherlands, state law still considers them a Utah resident.

• Burden on Websites: The law does not penalize individuals for using a VPN. Instead, it places the entire compliance burden on website hosts, demanding they implement stricter mechanisms to identify physical origin or face heavy fines.

• The Privacy Dilemma: Cybersecurity experts point out that forcing websites to verify physical locations or demand official government IDs creates huge honeypots of sensitive user data, increasing the risk of identity theft and data leaks.

Across the cybersecurity industry, privacy advocates have criticized the law as an ineffective attempt to regulate general-purpose security tools like VPNs, which millions of everyday users rely on to secure their data on public networks.

The Path Ahead for Online Security

While state and international regulators continue to debate age verification rules, core cybersecurity tools like Octohide VPN remain completely legal and vital for daily online safety. Restricting or penalizing privacy tools undermines fundamental data protection for ordinary citizens who simply want to defend their personal data against hackers and unsecured networks.

Frequently Asked Questions (FAQ)

Is using a VPN legal in Utah under SB 73?

Yes. Using a VPN remains completely legal in Utah and across the United States. SB 73 targets website operators that host specific types of content, requiring them to verify user age rather than placing restrictions on VPN users directly.

Does Octohide VPN collect personal information or track my identity?

No. Octohide VPN operates under a strict No Browsing Logs policy. We do not collect, track, or store your internet activity, search history, or personal identifiers.

Why do digital rights groups oppose VPN restrictions in age-verification laws?

Digital rights advocates argue that attempting to restrict or bypass VPNs forces websites to collect sensitive personal information (such as driver's licenses or credit cards), creating massive cybersecurity risks if those websites suffer a data breach.

How does Octohide VPN ensure my connection stays secure?

Octohide VPN encrypts your mobile data using industry-standard security protocols and has been independently audited by MASA (Mobile Application Security Assessment) to verify our software safety.