IA SF207

Commercial entities that publish or distribute obscene material online ("covered platforms") must perform reasonable age verification before allowing access to such content, or face civil liability if minors gain access

Acceptable age verification methods include government-issued identification, financial documents as age proxies, or other commercially reasonable methods, which may be conducted by third parties using privacy-preserving cryptographic techniques like zero knowledge proofs

Platforms and third-party verifiers are prohibited from retaining users' identifying information after completing verification or from distributing, selling, or disseminating that information

Violators face punitive damages capped at triple the plaintiff's reasonable attorney fees and costs, plus actual damages for privacy violations related to identifying information

Enforcement is exclusively through private civil actions; the state and political subdivisions are prohibited from directly or indirectly enforcing the law, and internet service providers are exempt from liability for merely providing access to covered platforms