Bluesky, the decentralized social media platform, is beginning to enforce age verification for its users in Ohio starting September 29, 2025, to comply with a new state law. The company is using the Kids Web Services (KWS) age-verification system—already deployed in South Dakota and Wyoming—to ensure that users in Ohio are 18 or older before accessing adult or “obscene or harmful to juveniles” content. This move follows Ohio’s House Bill 96, which mandates that websites with substantial adult content must use geofencing and “reasonable age verification” means, such as government ID scans or transactional data, and periodically reverify users. Bluesky’s decision highlights how emerging state-level mandates are forcing smaller social platforms to shoulder complex compliance burdens that could hamper innovation and user growth. Meanwhile, legal battles and constitutional questions loom, as similar laws in Mississippi have recently been permitted to advance by the U.S. Supreme Court.
Sources: Tom’s Guide, Wired
Key Takeaways
– State-level age verification mandates, like Ohio’s HB 96, are proliferating across the U.S., compelling platforms to integrate identity checks, geofencing, and periodic re-verification.
– For smaller or decentralized platforms like Bluesky, compliance with these patchwork rules imposes technical, operational, and growth challenges.
– These laws are encountering constitutional pressure and privacy concerns, especially as users turn to tools like VPNs to circumvent verification requirements.
In-Depth
In recent years, the push for greater protections for minors online has shifted from general advocacy to concrete legislation. States are increasingly adopting laws that require websites and social media platforms to verify users’ ages before granting access to adult content or otherwise restricting minors’ exposure to material deemed “harmful.” The challenge for platforms—especially smaller or decentralized ones—is navigating a mosaic of differing rules across jurisdictions without breaking the bank or alienating users.
Ohio’s latest move via House Bill 96 illustrates this fragmentation. Signed in June 2025 and effective September 30, the law mandates that covered websites use geolocation (via licensed providers) to block unverified users in Ohio until they confirm their age using identification documents, transactional or governmental databases, or other commercially reasonable systems. Operators must reverify users periodically, and maintain strict data deletion policies. Failure to comply may invite enforcement by the Ohio Attorney General. The law’s scope hinges on whether the site’s content or revenue materially involves adult or “obscene or harmful to juveniles” materials. According to reporting, Bluesky announced on September 29 that it would begin enforcing age checks for Ohio users using Kids Web Services (a system already in use in South Dakota and Wyoming) so as to comply immediately.
Bluesky’s situation is illustrative of the burden facing emerging platforms. Larger social media incumbents may have scale to absorb compliance costs; smaller or newer services like Bluesky risk diverting resources away from product development, moderation innovation, or user acquisition. Some states’ laws have already triggered negative consequences: in Mississippi, Bluesky suspended service rather than comply with a broadly drafted law that would have required sweeping changes. That decision underscores the strategic trade-offs involved: comply at cost, oppose in court, or pull out of the state entirely.
On the national stage, the legal and constitutional waters are unsettled. The U.S. Supreme Court recently declined to block enforcement of Mississippi’s social media age verification law while litigation proceeds, signaling at least tentative judicial tolerance for such regulation. Meanwhile, regulatory observers flag that many state laws target not only adult content access but also social media accounts themselves, requiring platforms to verify ages or obtain parental consent for minors — raising First Amendment and privacy challenges.
Privacy issues, in particular, have drawn criticism. Users are concerned about uploading sensitive identity documents or transactional records to third-party verification services. As wired reporting on the U.K.’s recent age verification rollout shows, a surge in VPN downloads is already occurring, as users seek to mask their location or identity to evade state or national age checks. In the United States, similar circumvention activity is expected. Some proposed laws in states like Michigan even aim to punish VPN use or promotion, though those efforts face fierce opposition from privacy advocates.
Looking ahead, a few possible trajectories may emerge. One is further fragmentation: more states pass varied, nonuniform age verification laws, deepening compliance complexity. Another is consolidation: large platforms or verification providers standardize age checks, with smaller platforms outsourcing compliance. Finally, the courts may impose limitations: if strict scrutiny or First Amendment protections curb broad mandates, state laws may be reined in. Until then, platforms like Bluesky will walk a tightrope — trying to balance compliance with growth, privacy with protection, and innovation with regulation.