On July 1, 2026, Iowa's age-verification law for adult websites, House File 864, took effect, making Iowa the 25th U.S. state to require age checks for online pornography. Governor Kim Reynolds signed the bill on June 3, 2026, as part of a broader package of legislation from the 2026 session. The law requires operators of internet sites, apps, or segments of sites containing content deemed pornographic for minors to perform "reasonable" age verification, and it applies to any site, app, or social media page where one-third or more of the content qualifies as material harmful to minors — the same one-third threshold used in the Texas statute the U.S. Supreme Court upheld in Free Speech Coalition v. Paxton last year.

Why It Matters

Iowa's law is notable less for its novelty than for its confirmation of momentum: with a quarter of U.S. states now requiring age verification for adult content, the compliance burden on multi-state platforms keeps compounding, and the "block the state entirely" strategy some operators used post-*Paxton* becomes harder to sustain as more of the map turns red. The $10,000-per-day, per-violation penalty structure is also a useful data point for any operator modeling worst-case exposure — Iowa's daily-plus-per-incident stacking is on the stricter end of the state playbook. Watch whether Iowa follows peer states into VPN-circumvention enforcement or app-store-level verification mandates next.

Under HF 864, users must confirm they are at least 18 years old before accessing covered sites. Verification can be completed through digital IDs, commercial transactional data, or other methods the Iowa Attorney General approves — giving covered operators some flexibility in how they comply rather than mandating a single government-ID check. The law also includes a data-minimization provision: websites and any third-party age-verification vendors are barred from retaining or sharing users' personal information without a legal mandate, and covered companies must secure whatever verification data they do collect.

Enforcement carries real teeth. Noncompliant companies face civil penalties of up to $10,000 per day, and each instance of a minor gaining unauthorized access counts as a separate violation — a structure that can compound quickly for high-traffic sites. Iowa joins the fast-growing bloc of states (now numbering 25) that have adopted Texas-style age-verification mandates in the wake of Paxton, continuing the post-SCOTUS patchwork that adult platforms like Aylo (Pornhub's parent) have responded to with a mix of compliance, geo-blocking, and litigation in other states.

Sources

Update — 2026-07-02

Initial entry — story first created. Law took effect July 1, 2026.