On June 16, 2026, the Court of Justice of the European Union (CJEU) handed down a Grand Chamber judgment in Joined Cases C-188/24 (WebGroup Czech Republic and NKL Associates) and C-190/24 (Coyote System) that, for the first time at the EU's highest judicial level, defines when a member state may impose age-verification requirements on pornographic websites established in another EU country. The dispute arose from France's audiovisual regulator ARCOM issuing formal notices to two Prague-registered adult-site operators under Article 227-24 of the French Criminal Code — which prohibits making pornographic content accessible to minors — pursuant to a decree of October 7, 2021 setting the technical conditions for compliance. The companies challenged the decree before France's Conseil d'État, arguing it violated the "country-of-origin" principle in the e-Commerce Directive (2000/31/EC), under which an online service is regulated by the member state where it is established, not where its users happen to live.

Why It Matters

Age verification is the single most disruptive regulatory force acting on adult platforms right now, and jurisdiction has been the central unanswered question: can France (or Germany, or Spain) police a site incorporated in the Czech Republic or Cyprus? The CJEU's answer — yes, but only via narrowly tailored orders — reshapes the compliance calculus for every major adult operator serving Europe, including Aylo (Pornhub), which has repeatedly geo-blocked entire jurisdictions rather than build site-level verification. The specificity requirement makes blanket national statutes legally vulnerable while validating case-by-case regulatory action, which likely means slower, more litigated, service-by-service enforcement rather than instant continent-wide compliance. For sextech and content businesses, the decision reinforces that the EU's age-verification regime will be built through targeted regulatory notices and proportionality fights — not sweeping bans — and that the country-of-origin shield still has real teeth.

The Court split the difference. It confirmed that France's measures fall within the directive's "coordinated field," meaning they are in principle subject to the country-of-origin rule — so Czech-registered sites are governed by Czech, not French, law by default. Crucially, the CJEU rejected France's argument that its general criminal prohibition sits outside that field simply because it is "general and abstract." But the Court also held that a destination member state may derogate from free movement under Article 3(4) to protect minors and human dignity — provided the measure is directed at a specific information society service, is necessary, and is proportionate. France's sweeping criminal statute, applying indiscriminately to any provider worldwide, failed that "specificity" test.

The practical upshot: EU governments can require age verification on foreign-established porn platforms, but they must do so through targeted, proportionate measures aimed at identified services rather than a one-size-fits-all national ban. The ruling now returns to the Conseil d'État to apply. It lands amid an aggressive wave of age-verification enforcement across Europe and beyond — from the UK's Online Safety Act and Apple's device-level iOS age checks to a patchwork of US state laws — and gives national regulators a green light with guardrails.

Sources

Update — 2026-07-06

Initial entry — story first created.