What is Texas HB 18?
The Law
Texas House Bill 18 requires commercial entities publishing sexual material to use "reasonable age verification methods" to prevent minors from accessing content.
Penalties
Up to $10,000 per violation. Each Texas user who accesses content counts as a separate violation. For platforms with millions of users, liability exposure is catastrophic.
Who It Affects
Any website where 33.3%+ of content is sexual material and is accessible to Texas residents. This includes adult content platforms, social media with NSFW content, and dating apps.
Private Right of Action
Texas HB 18 allows anyone to sue for violations—not just the state attorney general. This means class action lawsuits from parents, advocacy groups, and opportunistic litigants. Multiple platforms are already facing litigation.
Your Compliance Options
| Option | Privacy | Cost | User Experience | Compliance |
|---|---|---|---|---|
| Block Texas (Pornhub approach) | High privacy | 100% revenue loss | Users blocked | Compliant |
| Traditional ID Upload (Jumio, Yoti) | Low privacy | $2-5 per check | High friction | Compliant but risky |
| Zero-Knowledge (Arbiter) | Maximum privacy | $0.10-0.50 | 3 seconds | Fully compliant |
How Zero-Knowledge Verification Works
One-Time Setup (30 seconds)
User scans their passport's NFC chip or mobile driver's license with their phone. Arbiter issues a cryptographic credential stored locally on their device—never on our servers.
Verification Request (3 seconds)
When accessing your platform, user scans a QR code or clicks a link. Their device generates a zero-knowledge proof that they're 18+ without revealing their birthdate.
Cryptographic Confirmation
Your platform receives a cryptographic proof confirming "user is 18+". You never see their birthdate, ID photo, address, or any PII. Zero data breach liability.
What You Never See
With Arbiter's zero-knowledge approach, you never see or store:
- Exact birthdates
- Government ID photos or numbers
- Addresses or contact information
- Any personally identifiable information
Result: Zero data breach exposure. No GDPR/CCPA compliance headaches. Users trust you with their privacy.