Ohio Age Verification Law: The Loophole Keeping Major Sites Open

Ohio Revised Code section 1349.10 requires a covered organization that sells, delivers, furnishes, disseminates, provides, exhibits, or presents material that is obscene or harmful to juveniles on the internet to verify that every user is eighteen or older. The section took effect September 30, 2025. The statute also exempts providers of an "interactive computer service," and according to multiple independent news outlets that carve-out has let most of the largest adult-content platforms keep operating in Ohio without verifying anyone's age at all.

Information last verified on 2026-09-02. This article has not yet been reviewed by a licensed lawyer. The statutory text described here reflects Ohio Revised Code 1349.10 and 1349.101 as effective September 30, 2025. The legislative status of House Bill 84, the Attorney General's compliance review, and the reading of how the interactive-computer-service exemption plays out in practice rest on the news reporting cited below rather than on a primary record.

What Ohio's Age-Verification Law Requires

Ohio Revised Code 1349.10 does not reach every website. It applies to an "organization," which division (A)(8) defines as a commercial establishment that has a "significant or substantial portion" of its stock-in-trade in, derives a "significant or substantial portion" of its revenues from, devotes a "significant or substantial portion" of its content or advertising to, or maintains a "substantial section" of its sales or online content display space for the sale, rental, or viewing of material that is obscene or harmful to juveniles. It also covers a commercial establishment as defined in Ohio Revised Code 2907.38. An establishment may have other principal business purposes and still be covered, so long as one of its principal business purposes involves that material.

A covered organization has four duties under division (B). It must verify, through reasonable age verification methods, that anyone attempting to access the material is eighteen or older. It must separately verify the age of anyone creating an account or subscription, and re-verify that person every two years afterward. It must use a geofence system maintained and monitored by a licensed location-based technology provider that dynamically monitors where users are, and if that provider places a person in Ohio, the organization must block that person until the person's age has been verified. Finally, it must give users a notification when a geolocation check fails.

Reasonable age verification methods are defined in division (A)(10). They mean a commercial age verification system that uses photo identification or public or private transactional data, or third-party and governmental databases running such a system.

Deletion duties differ depending on who is holding the data. An organization that verifies someone merely attempting to access the material must immediately delete everything gathered for age verification once verification is complete, with no exception. An organization that verifies someone creating an account or subscription may keep what it needs for account access and billing, must delete that data on the account holder's request, and must delete all of it two years after the account was created unless the user renews. A third party that receives age-verification information transferred to it must immediately delete everything gathered for age verification once verification is complete, and no account or subscription exception applies to that party.

Division (D) exempts several categories outright, including providers of an interactive computer service, internet providers, mobile services, cable and video service providers, direct-to-home satellite services, cloud service providers, and people gathering or disseminating news for the general public.

The age-verification provisions took effect September 30, 2025. News reporting describes the law as having been folded into HB 96, the state budget bill.

How Ohio Enforces the Statute

Ohio Revised Code 1349.101 already supplies an enforcement mechanism, and it belongs to the Attorney General alone. Division (E) states that nothing in the section creates a private right of action and that the Attorney General has exclusive authority to enforce it.

Before suing, the Attorney General must send the organization written notice identifying and explaining the basis for each alleged violation. The organization then has forty-five days to cure the violations described in that notice and to give the Attorney General a written statement that the violations are cured and that it will refrain from further noncompliance. If it does that, no enforcement action follows. If it does not respond in time, or continues to fail to comply, the Attorney General may initiate an enforcement action and seek injunctive relief.

Two limits are worth noting. The civil action under 1349.101(A) is framed around a failure to comply where, as a result, a minor gains access to the material or performance. And the remedy the statute names is injunctive relief, not money. An organization that commits a later violation of the same type after reporting a cure loses the benefit of the cure window, but what the Attorney General is seeking is still a court order rather than a monetary penalty.

The Interactive-Computer-Service Exemption

Division (D)(2) of Ohio's statute exempts providers of an "interactive computer service," language that mirrors the federal definition found in 47 U.S.C. section 230, the same provision that generally shields platforms from liability for content their users post. Multiple news outlets describe this as an apparent drafting gap rather than a deliberate policy choice: because Pornhub's parent company Aylo, OnlyFans, and webcam sites primarily host content uploaded by third parties rather than content the platform itself produces, those companies can plausibly argue they qualify for the exemption, and reporting indicates they have not built age-verification systems for Ohio visitors as a result.

This is worth stating plainly, because it runs opposite to what many readers expect: Ohio's age-verification law has not stopped access to major adult sites. If anything, the pattern in Ohio is the reverse of what happened in Georgia, Florida, Missouri, and Virginia, where major platforms geo-blocked the state rather than build a compliant verification flow. In Ohio, reporting indicates those same platforms remain freely accessible without any ID check.

That is the sharp edge of the gap. Division (B)(3) of Ohio's own statute affirmatively requires a covered organization to run a geofence and to block anyone the system locates in Ohio until that person's age has been verified. The geo-blocking that happened voluntarily in other states is close to what Ohio's text demands outright, and reporting indicates it is not happening here.

The Ohio Attorney General's office reportedly reviewed 20 of the most-visited pornography websites in October 2025 and found that only one of them was actually complying with the verification requirement, according to the reporting reviewed for this article.

House Bill 84, the "Innocence Act": Where It Stands

House Bill 84 would reportedly close the interactive-computer-service loophole outright, removing the carve-out for platforms that host third-party content, and would add civil penalties of up to $100,000 per violation, funneled into a proposed "Innocence Act Enforcement Fund." Those penalties would be an addition rather than a starting point: as described above, 1349.101 already lets the Attorney General sue, but the relief that section names is an injunction, not money.

According to reporting from March 2026, the bill had passed the Ohio House and was referred to the Senate Judiciary Committee. No evidence of Senate passage or a governor's signature had turned up in this research. Because this kind of bill can move quickly once a legislature returns to session, anyone relying on Ohio's age-verification framework, whether as a compliance question for a business or a general information question as a resident, should check HB 84's current status rather than assume it is still pending.

Litigation Status

No lawsuit against Ohio Revised Code 1349.10 has surfaced in this research. That sets Ohio apart from several of its neighbors in a different, legally separate family of laws: Georgia's, Louisiana's, Nebraska's, and Virginia's social-media age-verification statutes have all drawn active court challenges, and Mississippi's social-media law remains under appeal after a U.S. Supreme Court shadow-docket order let it stay in effect. Illinois enacted a similar social-media law in 2026, but no lawsuit against it had been filed as of this writing, though advocacy groups have signaled one may follow. Ohio's adult-content statute has drawn no comparable challenge. Its problem, based on the reporting reviewed here, is enforcement in practice, not a court order blocking it.

What This Means If You Live in Ohio

If you can still reach a major adult site in Ohio without being asked to verify your age, that is consistent with the reporting summarized above, not evidence that the law does not apply or has been struck down. The gap described here is about which platforms the exemption plausibly covers, not about whether Ohio's age-verification requirement itself is valid; no court has questioned that. If HB 84 or a similar bill closes the interactive-computer-service exemption, that practical picture could change. For related state privacy protections, see Ohio data privacy laws.

Disclaimer

This article provides general information about Ohio's age-verification statute. It is not legal advice and does not create an attorney-client relationship. The statutory text described here reflects Ohio Revised Code 1349.10 and 1349.101 as effective September 30, 2025; the legislative status of House Bill 84 and the Attorney General's compliance review rest on the news reporting cited above rather than on a primary record. Verify current statutory text and the status of House Bill 84 with the Ohio General Assembly or a licensed Ohio attorney before relying on anything here for a specific situation.

Related Articles

• Age Verification Laws by State
• Missouri Age Verification Law
• Georgia Age Verification Law
• Ohio Data Privacy Laws

---

Last updated: 2026-09-02.