This is not legal advice. Laws in this area change frequently and vary by jurisdiction, and the description below is of regulatory mechanisms rather than of any country's current rules. Consult an official source for your own jurisdiction, or a qualified lawyer, before relying on anything here.
Adult content law looks chaotic when read country by country, because the same outcome — a site being unavailable — can be produced by five completely different legal instruments. Read by mechanism instead, the global picture is much simpler: there are a limited number of levers, and each country pulls a different combination of them.
What are the levers a country can actually use?
Five, operating at different points in the chain.
| Lever | Applies to | Typical form | What a user notices |
|---|---|---|---|
| Production regulation | Producers and performers | Consent documentation, age records, licensing, content modification rules | Content looks different, or is produced elsewhere |
| Distribution and obscenity law | Publishers and sellers | Criminal or administrative prohibition on certain material | Categories absent from local catalogues |
| Platform obligations | Intermediaries and hosts | Age assurance, takedown duties, reporting, verification of uploaders | Verification walls, removed content, closed upload features |
| Network-level access control | ISPs and resolvers | Mandatory filtering, DNS blocking, IP blocklists | The site does not load at all |
| Payment restrictions | Banks and card networks | Prohibited-merchant rules, licensing conditions | You can browse but cannot subscribe |
The fifth lever is the least legislated and often the most decisive. Payment networks apply their own risk rules independently of any statute, and a merchant category that becomes hard to process is effectively constrained regardless of whether the underlying activity is lawful.
Why do these rules differ so much between countries?
Because the legal concepts they are built on are not standardised, and two of them are defined locally by design.
Obscenity is a local standard. Most legal systems define the boundary by reference to prevailing community standards or public morals, which is a deliberately jurisdictional test. There is no international definition to converge on.
Constitutional starting points differ. Some systems treat expression as a protected right that regulation must justify against; others treat public morality as an affirmative basis for regulation. That difference determines whether new restrictions face a high or low bar.
Competence is split differently. In federal systems, the operative rules may sit at state or provincial level, so "the law of the country" may not exist as a single thing. In supranational systems, a framework instrument at one level may be implemented differently by each member state.
Enforcement reach is limited. A jurisdiction can regulate a foreign operator in principle, but enforcement often falls back on the levers it controls locally: network blocking, app store availability, and payment.
What does the picture look like by region?
The paragraphs below describe the type of regime found in each place, and name the instrument and the responsible body where we could confirm both against an official source. They are not summaries of what any country currently requires in detail. We have deliberately left out penalties, thresholds and procedural specifics: those are the parts that change fastest and carry the most consequence if misread, so take them from the official source rather than from here. Everything below was checked on 2026-08-03, and the sources are listed at the end of this section.
Japan anchors its rules in the Penal Code provision on obscene material, which attaches to distributing, publicly displaying, or holding such material for paid distribution — conduct at the production and distribution layer rather than at network carriage. A separate statute enacted in 2022 regulates the contracting and release process for sexually explicit video productions, requiring written agreements and providing for waiting periods and performer cancellation rights; it is administered by the Cabinet Office's Gender Equality Bureau. Pre-release review is carried out by private industry associations rather than by a government censor.
United States splits the question between two layers. Federal law imposes record-keeping requirements on producers of sexually explicit material, with implementing regulations issued by the Department of Justice; both remain on the books, though a 2020 federal appellate decision granted as-applied First Amendment relief to specific litigants and an earlier decision in the same series struck the inspection regulation on Fourth Amendment grounds. The operative rules on access, by contrast, sit at state level, and they are not uniform. In June 2025 the Supreme Court upheld one state's age-verification statute against a First Amendment challenge, applying intermediate scrutiny on the reasoning that the burden on adults is incidental. Litigation over newer state requirements remains active.
United Kingdom regulates through the Online Safety Act 2023, with Ofcom named in the Act as regulator. The duties relating to pornographic content published by a service itself sit in Part 5 and were brought into force on 17 January 2025 by commencement regulations. They require an in-scope provider to use age verification or age estimation of a kind highly effective at determining whether a user is a child. The duties are expressed as obligations of the service provider; the viewer is the object of the check, not the duty-holder. The earlier age-verification provisions in Part 3 of the Digital Economy Act 2017 were repealed with effect from 26 October 2023.
European Union operates a genuine two-level structure. The Digital Services Act is a Regulation — directly applicable in every member state without transposition — and imposes tiered obligations on intermediary services, including a provision on the protection of minors online under which the Commission has issued guidelines. The Audiovisual Media Services Directive is a Directive, setting outcomes that each member state implements through its own national law, and it expressly contemplates age verification as a technical measure for the most harmful content. So obligations differ between members despite the shared framework, exactly as the two instrument types imply. A June 2026 Court of Justice ruling confirmed that a member state may in principle apply age-verification obligations to a provider established in another member state, but only subject to conditions including proportionality and a prior request to the state of establishment.
Germany applies a youth media protection framework built on an interstate treaty alongside a federal youth protection act, supervised by a dedicated commission constituted as an organ of the state media authorities, with a separate federal body handling indexing and platform precautionary measures. Its distinguishing feature is the closed-user-group standard: content that would otherwise be inadmissible may be distributed online only where the provider restricts access to verified adults, which the supervisory commission reads as requiring one-off identification plus per-session authentication rather than a declaration. German authorities have pursued operators established outside Germany as well as domestic ones, and administrative courts have upheld both those prohibition orders and, more recently, blocking orders addressed to access providers.
France regulates through Arcom, the audiovisual and digital communications regulator, under provisions of the 2004 law on confidence in the digital economy as amended by the 2024 law on securing and regulating the digital space. Arcom adopted a technical reference framework for age-verification systems in October 2024, published in the official journal that month, which remains the applicable version. Where a service does not comply after formal notice, Arcom can escalate to intermediaries — access providers, DNS resolver providers and search engines — for blocking or dereferencing, and has done so. In July 2025 the Conseil d'État set aside a lower interim ruling and declined to suspend the ministerial order extending this supervision, leaving it in effect while not ruling on its legality.
South Korea does regulate at the access layer, which is why restriction is usually experienced as a site failing to load rather than as a notice to the user. The statutory basis is the provision of the network utilisation and information protection act prohibiting circulation of specified categories of illegal information, obscene material among them, which empowers an administrative commission to order a service provider to refuse, suspend or restrict handling — and only after a separate deliberation commission has decided. Both bodies were renamed and restructured recently, and the English acronyms widely used for them in older writing no longer match the names in current statute.
Mainland China handles adult material inside the general network content-control architecture rather than under a dedicated adult-content regime. The 2000 State Council measures on internet information services list pornographic content as one of nine prohibited categories in a single undifferentiated list, and distribute supervision across the telecoms authority plus press, education, health, market regulation, public security and state security organs. The 2019 provisions on governance of the online information content ecosystem repeat obscene content as one of ten prohibited categories and place coordination with the national cyberspace administration, with the disposal duty falling on platforms.
Taiwan combines two layers. Criminal Code provisions on obscenity attach to disseminating, publicly displaying or manufacturing and holding such material with intent to disseminate. Alongside that, the child and youth welfare and rights protection act — for which the Ministry of Health and Welfare is the central competent authority — directs the communications authority to convene the relevant agencies and commission a civil organisation to run an internet content protection institution, requiring platform providers to adopt self-regulatory measures and to restrict or remove harmful content on notification.
Hong Kong applies the Control of Obscene and Indecent Articles Ordinance, which works through classification and publication rules adjudicated by the Obscene Articles Tribunal, part of the Judiciary, with appeal to the Court of First Instance. The Tribunal holds exclusive jurisdiction to decide whether an article is obscene, indecent or neither, sorting material into three classes: unrestricted, indecent and restricted to adults with statutory warning requirements, or obscene and prohibited from publication. The regime applies to material published on the internet, and enforcement is shared between the administering office, Customs and Excise, and the Police.
Southeast Asia genuinely cannot be generalised, and the divergence is visible in the instruments themselves. Singapore places the duty on class-licensed access providers to deny access to sites the authority notifies them about. Malaysia's content code prohibits pornographic material but sets a complaint-driven notice-and-takedown model, and states expressly that access providers and hosts are not required to block anything absent a direction, nor to monitor users. Indonesia operates an administrative access-termination regime in which providers implement blocking on ministerial order. Thailand routes blocking through a court petition, which for public-order and morals material must first be approved by a statutory review committee. Four countries, four different architectures — which is the point.
India regulates through the Information Technology Act 2000 and rules made under it. The 2021 intermediary guidelines and digital media ethics code impose intermediary-facing obligations, and Part III of those rules establishes an oversight structure — an inter-departmental committee, a procedure for issuing directions, and an emergency route — operating by reference to the blocking power in the Act and its dedicated 2009 procedural rules. The framework is administered by the Ministry of Electronics and Information Technology.
Latin America does not support a single characterisation, and an earlier version of this page got it wrong. The general pattern in several countries is indeed old public-decency provisions in the criminal code rather than a dedicated adult-content framework: Brazil's criminal code chapter on offences against decency dates in its terms to 1940, and Argentina's relevant provisions address material involving minors and unwanted public exhibition rather than distribution to consenting adults. But Brazil enacted a dedicated digital statute for children and adolescents in September 2025 that requires providers of content improper for under-18s to adopt effective access-prevention measures and reliable age verification on each access, expressly ruling out self-declaration and expressly naming pornographic material as in scope. So the region now contains at least one dedicated adult-content age-gating duty, in its largest jurisdiction.
Russia operates a registry-based blocking system. The federal information law creates a single automated register of domain names, page pointers and network addresses identifying sites carrying information prohibited from dissemination, assigns its formation and maintenance to the federal executive body responsible for supervision of communications, information technology and mass media, and sets the grounds for entry by reference to decisions of authorised federal bodies and of courts. That functional description corresponds to Roskomnadzor, which the government's own current list of federal executive bodies confirms as an existing federal service. The same law separately prohibits operators of means of accessing restricted resources from offering that capability within Russia — noted here only as the existence of regulation, since this guide does not discuss circumvention.
The Gulf states furnish the clearest examples of prohibition-oriented law combined with mandatory ISP-level filtering framed in public-morality terms. The United Arab Emirates regulator's internet access management policy obliges licensees to block prohibited content — defined by reference to public interest, morality, order and security — to build and maintain the detection systems at their own cost, to display a blocking message, and to provide the regulator with unfiltered connections for compliance monitoring; the regulator's own published breakdown puts content contrary to national ethics and morals, expressly including nudity, as the largest blocked category. Oman's web-based services regulation lists indecent and explicit sexual material under a public order and morals heading and gives the authority the right to block access. Kuwait's regulator operates an official blocking-request service on public morals grounds.
Sources for this section
All fetched and checked on 2026-08-03. Each is the official publisher, regulator, court or gazette for the jurisdiction concerned.
- Japan — e-Gov law search, Penal Code; Japanese Law Translation, Penal Code; Cabinet Office, Gender Equality Bureau
- United States — 18 U.S.C. 2257 (GPO); 28 CFR Part 75 (GPO, 2025 edition); Free Speech Coalition v. Paxton, No. 23-1122 (2025); Free Speech Coalition v. Attorney General (3d Cir. 2020)
- United Kingdom — Online Safety Act 2023; section 81; Commencement No. 4 Regulations 2024; Digital Economy Act 2017, Part 3
- European Union — Regulation (EU) 2022/2065; Directive 2010/13/EU, consolidated; Commission guidelines on protection of minors; CJEU press release 87/26
- Germany — KJM, legal bases; KJM, inadmissible offerings and closed user groups; die medienanstalten, on the KJM; BzKJ, tasks
- France — Arcom, protection of minors; Law No. 2024-449 (SREN); Délibération No. 2024-20, JORF; Conseil d'État, 15 July 2025
- South Korea — National Law Information Center, network act art. 44-7; deliberation commission, illegal information categories
- Mainland China — State Council Gazette, Decree No. 292; CAC Order No. 5
- Taiwan — Criminal Code art. 235; Child and Youth Welfare and Rights Protection Act, arts. 6 and 46
- Hong Kong — Judiciary, Obscene Articles Tribunal; OFNAA, enforcement of the Ordinance; CEDB policy page
- Southeast Asia — IMDA Internet Code of Practice; MCMC Content Code; Indonesia, Permenkominfo 5/2020; Thailand, Computer-Related Crime Act (MDES)
- India — India Code, Information Technology Act 2000; MeitY, IT Rules 2021 as updated
- Latin America — Brazil, Penal Code (Planalto); Brazil, Lei 15.211/2025; Argentina, Penal Code (InfoLEG); Colombia, Ley 679/2001
- Russia — pravo.gov.ru, Federal Law 149-FZ; Government of Russia, federal executive bodies
- Gulf states — TDRA internet access management policy; Oman TRA, web-based services regulation; Kuwait CITRA, web content request
Which trends are visible across jurisdictions?
Four directions of travel are widely observable, independent of any single country's rules.
| Trend | What is shifting |
|---|---|
| Age assurance obligations | From self-declaration toward verified or estimated age, imposed on platforms |
| Liability moving to intermediaries | Duties attaching to hosts, app stores and payment providers rather than only publishers |
| Consent and provenance requirements | Documentation duties for uploaded material, and removal obligations for non-consensual imagery |
| Extraterritorial claims | Jurisdictions asserting authority over foreign operators serving their residents |
These are characterisations of direction, not citations, and they are stated without naming instruments on purpose. Each is nonetheless illustrated by something in the section above and its sources: age assurance obligations imposed on services rather than on viewers, duties attaching to intermediaries and access providers rather than only to publishers, and a June 2026 Court of Justice ruling addressing when one member state may reach an operator established in another. Treat the table as a lens for reading a specific country's rules, not as a substitute for reading them.
The practical consequence for a reader is that availability changes are more often a compliance decision than a legal prohibition. When a platform withdraws from a market, it is usually because the cost of complying exceeded the value of that market — the content was not necessarily made illegal.
What should a reader take from this?
Three things, none of which substitute for checking your own jurisdiction.
Rules aimed at platforms are not automatically rules aimed at you, but that distinction is jurisdiction-specific and cannot be assumed. Categories treated as criminal for individuals differ substantially between countries, and the consequences are serious enough that guessing is unreasonable. And this area has changed quickly enough that anything written down — including this page — should be checked against a current official source.