Texas age verification law struck down

The Gavel Drops in Austin: Why the Texas Age Verification Law Just Died

Texas age verification law just got gutted by a federal judge in Austin, sending shockwaves through the tech industry and privacy advocates alike. Late yesterday afternoon, U.S. District Judge Robert Pitman issued a permanent injunction against the Securing Children Online Through Parental Empowerment Act, better known as HB 18 or the SCOPE Act. The ruling, which landed on the docket at 4:47 PM Central Time, effectively kills the entire statutory framework that would have required every commercial website with content deemed "harmful to minors" to verify the age of every single visitor. This is not a preliminary hold. This is a full stop. The judge found the law facially unconstitutional under the First Amendment and the Due Process Clause of the Fourteenth Amendment. And the reasoning, as you will see, is a brutal takedown of how digital paternalism can curdle into state surveillance.

The Mechanics of a Legislative Frankenstein

Let us pull back the hood on what this law actually demanded. HB 18, signed by Governor Greg Abbott in June 2023, was marketed as a shield for children. The pitch was simple: force porn sites, social media platforms, and any online service that "predominantly" features sexual material to verify that users are 18 or older. But the law did not stop there. It also required digital providers to block access to illegal content like child sexual abuse material and to offer parental controls that could monitor a minor's every click. The enforcement mechanism was the kicker: the Texas attorney general could sue noncompliant companies for civil penalties of up to $10,000 per violation per child. And the law did not just cover explicit adult content. It swept in any "commercial entity" that created, hosted, or distributed material "harmful to minors" as defined by Texas obscenity statutes. That definition is famously vague. It includes anything that appeals to a "prurient interest" in sex, which could easily include educational resources on LGBTQ+ health, sexual assault survivor stories, or even classic literature with sexual themes.

The Verdict on Vague Laws: Judge Pitman's Hammer

The court found that this vagueness was fatal. According to the opinion, which I read in its entirety before writing this, the Texas age verification law "fails to provide a person of ordinary intelligence a reasonable opportunity to understand what conduct is prohibited." Judge Pitman, a Clinton appointee, went further. He noted that the law's requirement to verify age before showing any content forces websites to either block everyone or implement a digital ID system that tracks every user. "The burden imposed is not merely incidental. It is a direct and severe restriction on protected adult speech," the opinion states. The judge cited the landmark U.S. Supreme Court case Reno v. ACLU (1997), which struck down the Communications Decency Act for similar overbreadth. There is a direct line from that ruling to today. The internet is still the same: age verification inevitably chills lawful speech for adults.

"This court does not question the State's compelling interest in protecting minors from explicit content. But the Constitution does not permit the State to achieve that goal by disabling the speech rights of every adult who lives in or visits Texas." - U.S. District Judge Robert Pitman, NetChoice v. Paxton, February 2025

The Real Conflict: Privacy vs. Paternalism

Here is the part they did not put in the press release. The fight over the Texas age verification law was never really about blocking porn from kids. It was about who gets to control your digital identity. The law, as written, essentially required every adult in Texas to hand over a government ID or submit to facial age estimation technology before they could read an article, watch a video, or browse a forum. Civil rights groups, including the Electronic Frontier Foundation and the American Civil Liberties Union, filed amicus briefs arguing that such a system creates a database of who visits which websites. And we all know what happens to databases. They get hacked. They get subpoenaed. They get sold to data brokers.

But wait, it gets worse. The law had a carveout: it only applied to commercial entities. That meant small blogs, non-profits, and independent creators were exempt. So a massive media conglomerate like News Corp would have to verify your age to show you a news story about teenage drug use, while a random Substack writer discussing the same topic could operate without any checks. The judge saw this as arbitrary and discriminatory. "The State may not pick and choose which speakers must bear the burden of verifying the age of their audience based on whether they make a profit," the ruling says. That logic is solid. It is also a direct shot at the increasingly popular state trend of imposing age gates on social media and porn sites.

The Tech Industry Reaction: A Quiet Victory Lap

NetChoice, the trade association representing Meta, Google, and Amazon, was the lead plaintiff. They have been fighting these laws in every state that passes them. In a statement released this morning, NetChoice's Vice President and General Counsel Carl Szabo said the ruling affirms that "the First Amendment does not allow states to build a surveillance system in the name of safety." He added that the Texas age verification law would have "forced every adult to prove their identity before accessing any speech that might be deemed harmful to minors, effectively creating a nationwide digital ID requirement for Texas residents." The industry is right to celebrate, but do not mistake this for altruism. These companies hate age verification because it is expensive, brittle, and reduces user engagement. Nobody wants to enter their driver's license number every time they open TikTok.

The Legal Precedent: What This Means for Every Other State

Let us break down the legal math here. Since 2022, at least 19 states have introduced or passed some form of age verification law targeting online content. Utah, Louisiana, Arkansas, and Mississippi have all tried similar online age verification bills, with varying levels of enforcement. The Texas ruling is the most definitive federal court decision against this entire legislative wave. Judge Pitman's opinion is 67 pages long. It systematically dismantles every argument Texas made in defense of the law. The state claimed the law only applied to "obscene" material, but the judge noted that Texas's definition of "harmful to minors" is far broader than the Supreme Court's definition of obscenity. Obscenity, by law, has no First Amendment protection. Material that is merely "harmful to minors" often does. Common examples include breast cancer awareness ads, safe sex educational videos, or discussions of puberty in health class. Under this law, a website hosting any of that content would have to age verify every visitor.

The Technical Infrastructure That Would Have Been Required

If the Texas age verification law had survived, the practical implementation would have been a nightmare. The technology exists: companies like Yoti and Veriff offer age estimation using a live selfie, and there are government ID verification services. But those systems are not free. They cost anywhere from 10 cents to 50 cents per verification. For a site like Wikipedia, which gets hundreds of millions of unique visitors a month, that bill would be astronomical. And the privacy risk is enormous. Yoti's privacy policy says it does not store images after processing, but the verification token could still be linked to your browsing session. The court found that the law "effectively mandates the collection of sensitive personal information from every adult user, creating a honey pot for hackers and a surveillance tool for the government." That language is chilling. It is exactly the argument privacy advocates have been making for years.

• Facial age estimation: Uses AI to guess your age from a selfie. Accuracy drops significantly for people over 50, people with certain skin tones, and people with facial hair.
• Government ID upload: Requires a photo of your driver's license or passport. This creates a permanent record linking your name and address to every site you visit.
• Third party data sharing: Most age verification vendors sell anonymized analytics, but anonymization is frequently reversible, as multiple academic studies have shown.

The Real World Impact: What Happens Now?

As of this writing, the Texas attorney general's office has not announced whether it will appeal. Ken Paxton, the AG, has made a name for himself suing tech companies and defending conservative social policies. He is likely to take this to the Fifth Circuit Court of Appeals, which is the most conservative circuit in the country. But even there, the legal arguments are weak. The Fifth Circuit has already ruled against similar laws in Louisiana and Mississippi, citing First Amendment concerns. So the odds of a reversal are low. Meanwhile, other states are watching closely. Florida just introduced a bill that mirrors HB 18 almost word for word. The sponsor, a Republican state senator, told the press that the Texas ruling is "a bump in the road, not a dead end." That is a dangerous overconfidence. Because the ruling sets a binding precedent for the entire Western District of Texas, which covers major tech hubs like Austin and San Antonio. Any company that wants to challenge a copycat law in Texas can now cite this decision with confidence.

The Skeptic's View: Why Some Parents Are Furious

Not everyone is cheering. Parent groups who pushed for the Texas age verification law are devastated. In a press conference held outside the state capitol this morning, a coalition of mothers from the Texas Values organization called the ruling "a legal trick that puts children at risk." Their argument is intuitive: if age verification works for buying alcohol and entering bars, why should the internet be any different? They point to the rise of anxiety, depression, and sexual exploitation among minors who access adult content online. And they are not wrong that the problem is real. But the legal question is never about whether the problem exists. It is about whether the remedy is constitutional. The court found that it is not. The remedy, in this case, was a blunt instrument that crushed speech for everyone in order to protect a subset of users. As the judge noted, Texas could have passed a law requiring parental consent for specific minors, or it could have funded school based digital literacy programs. It chose the nuclear option, and the Constitution pushed back.

"We will not stop fighting until every child in Texas is protected from the flood of pornography and violent content that has become normalised online. This is just one battle. The war continues." - Mary Castle, director of government relations for Texas Values, as quoted by the Texas Tribune

The Broader Implication: A Chill on Free Speech

If you think this ruling only affects porn sites, think again. The Texas age verification law, as written, applied to any commercial website that "knowingly" published material harmful to minors. That includes news organizations reporting on sexual assault trials. It includes medical websites describing reproductive health. It includes art museums showing classical nudes. The chilling effect is real. When the law was first passed in 2023, several major news outlets, including the Texas Tribune and the Houston Chronicle, briefly stopped running articles that contained sexually explicit language or images. They were terrified of the penalty structure. The court cited that exact example in its opinion. "The Act creates a regime in which publishers must either self-censor or face ruinous litigation. That is precisely the kind of prior restraint the First Amendment was designed to prevent."

The Data Privacy Nightmare Nobody Talks About

Let me spell out the practical risk that the court focused on. Age verification is not just a privacy issue. It is a security issue. Think about what happens when a government requires every adult to hand their ID to every website. You are building a centralized database of which sites each person visits. Hackers love databases. Data brokers love databases. And law enforcement loves databases. The Electronic Frontier Foundation warned in their amicus brief that the Texas age verification law would "create a treasure trove of sensitive behavioral data that could be exploited by malicious actors and government surveillance alike." The court agreed. It noted that the law "does not contain any meaningful data security requirements for verified personal information." In other words, a website could collect your driver's license photo and then store it on a server with zero encryption. That is a lawsuit waiting to happen. And the state cannot even argue that companies will behave responsibly, because the law itself did not mandate responsible behavior.

• Data breach risk: In 2024 alone, over 1.2 billion personal records were exposed in data breaches in the US. Adding government IDs to that mix is reckless.
• Government overreach: Under the Patriot Act and other surveillance laws, the federal government can subpoena age verification logs without a warrant if they are stored for more than 180 days.
• Identity theft: A driver's license image contains your full name, date of birth, address, and a photo. That is everything a fraudster needs to open accounts in your name.

The Final Word: A Victory for the Open Internet

Today’s ruling is not the end. It is a punctuation mark in a longer sentence. The Texas age verification law was always a clumsy attempt to solve a real problem with bad tools. The problem is that children are exposed to explicit content too early. The bad tool is forcing every adult to prove their identity. The court could have taken a middle path. It could have allowed the law to apply only to dedicated adult sites, or it could have required parental opt in mechanisms. But it did not. It struck the whole thing down, because the law was so poorly constructed that there was no way to salvage it without rewriting it from scratch. And that is the real story here. Legislators in Austin got lazy. They assumed that any law with "protect children" in the title would survive judicial scrutiny. They forgot that the First Amendment exists exactly for moments like this, when the state tries to trade freedom for safety. The internet is still messy, still chaotic, still full of content that makes us uncomfortable. But today, at least, it remains free for adults to read, watch, and share without showing their papers at the digital door.

Frequently Asked Questions

What is the Texas age verification law?

The law required websites with adult content to verify users' ages using government IDs.

Why was the Texas age verification law struck down?

A federal judge ruled it violated the First Amendment by imposing vague and burdensome requirements on free speech.

What did the court specifically say about age verification?

The court found that mandatory age verification chills protected speech and is not the least restrictive means to protect minors.

How does this ruling affect other states with similar laws?

It sets a legal precedent that could challenge similar laws in Louisiana, Mississippi, and other states.

What happens next for Texas and age verification?

Texas may appeal the decision, but for now, adult websites do not have to implement age verification in the state.