this post was submitted on 03 May 2026
724 points (98.4% liked)
Technology
84409 readers
3623 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Can’t they argue they “did business with” someone in whatever jurisdiction the VPN IP address is located? And then the Utah resident moved whatever digital goods or content from that location into Utah? So it’s the Utah resident who brought the contraband into Utah, not the website?
Yes, that's why VPNs work for evading geo-blocking.
This law creates a liability trap by explicitly saying that they cannot claim ignorance and are liable as as long as the State can prove that the user was physically located in the EU.
The only way to effectively comply with the law is to implement universal age verification of all users, regardless of location. This is the actual goal, the law in this article is specifically designed to remove the VPN dodge.
I don’t see how they are going to prove that though. The website is going to say they sent the packets to someone in Russia (or wherever the vpn is.) My point is, I don’t even see how they can selectively enforce this.
They don't have to.
What the law does is remove the ability for the company to apply the defense 'I knew they were located in Russia'.
The State only has to prove two elements 1. The person was physically in Utah and 2. That they did business.
This law makes it so that there is no 'I didn't know' defense.
A State investigator makes an account, uses a VPN, and 'does business with' the site.
When they bring the case to court. The site is guilty because they can prove that the investigator was in Utah and that they did business with the site.
States love to do this, they remove the mens rea (guilty mind) element so that you're guilty regardless of your knowledge or intent.