Age Verification for Adult Oriented Websites
IN Adult Website Age Verification
Children · Data security
Enacted as SEA 17 (2024), this chapter requires adult websites to verify that visitors are 18 or older using a mobile credential, an independent third-party verification service, or transactional data. Operators and their verification vendors may not keep users' identifying information and must secure it. Verification data counts as 'personal information' under the breach law. A preliminary injunction was vacated after Free Speech Coalition v. Paxton (2025), and the law is enforceable.
- Where
- Indiana
- Citation
- Ind. Code ch. 24-4-23 (IC 24-4-23-1 to 24-4-23-17)
- Status
- In force
- In force since
- 2024-07-01
- Last amended
- 2025-07-01
- Enforced by
- Indiana Attorney General; parents or guardians; any person (injunction); individuals whose data is retained
- People can sue
- Yes
- Penalties
- AG: injunction, civil penalty up to $250,000, and costs (IC 24-4-23-15). Parents of a minor who got access: actual damages or up to $5,000, plus fees (IC 24-4-23-11). Individuals whose verification data was unlawfully kept: actual damages or up to $5,000 (IC 24-4-23-13). Any person may seek an injunction (IC 24-4-23-12).
- Applies to
- Owners and operators of publicly accessible websites where at least one-third of images and videos depict material harmful to minors; news sites, cloud providers, and ISPs or search engines that only provide access are excluded (IC 24-4-23-1, 24-4-23-2)
Practices it requires
- Use a reasonable age verification method (mobile credential, independent third-party database check, or commercially reasonable transactional-data method) to keep minors off the site.IC 24-4-23-7, 24-4-23-10
- Neither the operator nor its verification vendor may retain the identifying information of people seeking access, unless a court order requires it.IC 24-4-23-13(b)
Security duties
- Use commercially reasonable methods to secure all information collected and transmitted for age verification.IC 24-4-23-14
Breach duties
- Age-verification information collected under this chapter is 'personal information' for Indiana breach notification.IC 24-4.9-2-10(3) · From 2024-07-01
Sources
- Official text
- Indiana Code 2026, Title 24, Chapter 4-23 (Indiana General Assembly)
- SEA 17 (2024), P.L.98-2024, SECTION 1 effective July 1, 2024
- HEA 1050 (2025), P.L.1-2025, SECTIONS 206-214 technical amendments, effective July 1, 2025
- Free Speech Coalition v. Rokita, No. 24-2174 (7th Cir.), docket: July 15, 2025 order (amended Aug. 1, 2025) vacating the preliminary injunction and remanding for judgment for the defendant on the First Amendment claim; mandate Aug. 11, 2025
- Free Speech Coalition v. Rokita, No. 1:24-cv-00980 (S.D. Ind.), docket: case continues on the Attorney General's counterclaims against website operators (entries through Sept. 22, 2026)
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Unverified: District court docket entries were read from CourtListener's RECAP mirror, not PACER, and may be incomplete; the exact claims in the AG's counterclaim were not read.
Research reference, not legal advice.