01 / The Ruling
What Did the TAR Lazio Actually Rule?
The TAR Lazio (Rome's Administrative Court) ruled in April 2026 that Italy's age verification requirements — as implemented by AGCOM — cannot be enforced against adult platforms based in other EU member states, without following specific cross-state procedures required by EU e-commerce law.
The April 2026 Decision
The TAR Lazio's Fourth Section ruled that the obligation to implement age verification cannot be applied to platforms registered in other EU member states — companies like Aylo, which operates from Cyprus and Luxembourg. The court found that Italy's national regulation conflicts with the EU's e-commerce legal framework, which requires specific inter-state coordination procedures before a member state can impose restrictions on services based in another EU country.
The ruling accepted Aylo's argument that EU e-commerce law prevails over national Italian regulation. For AGCOM to legitimately enforce age verification against a Cyprus-based platform like Aylo, it would first need to go through the specific cross-border cooperation mechanism established under the EU's e-commerce directive — a process that has not been completed.
⚖️ What This Means in Practice
Pornhub, YouPorn, and RedTube — all operated by Aylo — remain accessible in Italy without age verification, at least while the legal case proceeds. AGCOM cannot issue formal warnings, block access from Italy, or impose fines of up to €250,000 against Aylo's platforms until the underlying legal question is resolved.
The Earlier Cautionary Measure
This April 2026 ruling follows an earlier provisional decision. On January 30, 2026, the TAR Lazio had issued Ordinanza n. 1851/2026 — a cautionary measure that suspended the immediate enforcement effects of AGCOM's age verification requirements against Aylo. That first order was a procedural step; this April ruling goes to the substance of whether EU law blocks Italian enforcement entirely against non-Italian EU platforms.
The January ordinance had already frozen sanctions against Aylo's sites and set the case for a March 11, 2026 hearing. The April ruling represents the court's substantive verdict on the jurisdictional question.
02 / The Plaintiff
Who Is Aylo and Why Did It Sue AGCOM?
Aylo Freesites Ltd is the Luxembourg and Cyprus-registered parent company of some of the world's most visited adult platforms, including Pornhub, YouPorn, and RedTube. It sued AGCOM to block enforcement of age verification requirements it argued were technically ineffective, privacy-invasive, and legally inapplicable to EU-based companies.
33M
EU Monthly Viewers
Pornhub alone reaches 33 million viewers per month across the European Union. See our Pornhub 2025 platform analysis for full traffic and ownership data.
45M
EU Monthly Active Users
Total EU-wide active user base across Aylo's portfolio of adult platforms.
€500M
Estimated Annual Profit
According to Luxembourg Times estimates for Pornhub's annual profitability.
Cyprus
EU Registration
Aylo Freesites Ltd. is registered in Cyprus — an EU member state. This is the legal key to its defense.
Aylo's Three Arguments Against Italian Age Verification
First, the legal argument: As an EU-registered company, Aylo argued it is governed by the laws of its country of establishment (Cyprus), not Italian national law — and that AGCOM cannot bypass this without following EU-mandated cross-border procedures.
Second, the privacy argument: Aylo contended that site-level age verification systems "compromise the privacy of users" by requiring the collection of sensitive personal data at the point of access. The company argues this creates more harm than it prevents — a position that echoes data protection advocacy groups who have raised similar concerns in France and Germany. The broader challenge of adult platform payment infrastructure and privacy-compliant verification is explored in our complete guide to payment methods for premium adult content.
Third, the efficacy argument: Aylo argued that site-by-site age verification "fails to protect minors" and instead pushes traffic to unregulated and non-compliant platforms. If Pornhub requires ID verification and a noncompliant competitor does not, minors simply migrate — they are not protected, only redirected.
03 / The Law
What Is Italy's Decreto Caivano and What Does It Require?
The Decreto Caivano (Decree-Law n. 123/2023, converted into Law n. 159/2023) is the Italian legislation that introduced mandatory age verification for adult content, named after a town near Naples following a juvenile crime case that prompted a crackdown on minors' online exposure.
What the Law Requires
Article 13-bis of the Decreto Caivano prohibits minors from accessing pornographic content online and imposes an obligation on websites and video-sharing platforms distributing such content in Italy to verify that users are adults before granting access. The obligation applies "regardless of the country of establishment" of the platform — language that Aylo directly challenged as incompatible with EU law.
To implement the law, AGCOM issued Delibera n. 96/25/CONS on April 8, 2025, which defined the technical and process requirements for age verification. The system was designed around a "double anonymity" principle: the verification provider knows who the user is, but not which site they are accessing; the site knows the user is verified as an adult, but not their identity. Italy planned to eventually integrate this with the IT Wallet digital identity system.
The Enforcement Timeline and Deadlines
Italy-based platforms and non-EU platforms were required to comply from November 12, 2025. EU-based platforms (like Aylo) were given a later deadline of February 1, 2026. Penalties for non-compliance include fines up to €250,000 and the possibility of site blocking.
AGCOM published a list of 48 platforms subject to the rules. As of the February 2026 deadline, the vast majority of sites on the list had not implemented any age verification system — and the Aylo ruling has effectively frozen enforcement against all EU-based operators until the jurisdictional question is resolved.
🇪🇺 The Systemic Impact
The TAR Lazio ruling does not formally apply to other EU-based platforms on AGCOM's list — only to Aylo. But proceeding with sanctions against other EU operators while the Aylo case is pending would invite identical legal challenges, effectively paralysing Italy's entire enforcement framework against foreign EU platforms.
04 / The Saga
What Is the Full Timeline of Italy's Age Verification Saga?
Italy's attempt to enforce age verification on adult sites has involved multiple missed deadlines, regulatory clarifications, and legal challenges — stretching from 2023 through 2026 with no final resolution.
September 2023
Decreto Caivano Enacted
Decree-Law n. 123/2023 (the "Decreto Caivano") introduced Article 13-bis, mandating age verification for adult content sites accessible in Italy. Converted into Law n. 159/2023.
April 8, 2025
AGCOM Issues Technical Regulation
AGCOM adopts Delibera n. 96/25/CONS, defining the technical and procedural framework for age verification. The "double anonymity" model is the centrepiece: third-party verification without revealing user identity to the site.
October 31, 2025
AGCOM Publishes List of 48 Platforms
AGCOM identifies 48 adult platforms subject to the regulation, including Pornhub, YouPorn, RedTube, XNXX, xHamster, and OnlyFans. Italian-based platforms and non-EU sites given November 12 compliance deadline.
November 12, 2025
First Deadline — Effectively Missed
The vast majority of the 48 listed sites implement no age verification. AGCOM later clarifies this deadline applied only to Italian-based sites. EU-based foreign platforms given until February 1, 2026.
January 30, 2026
TAR Lazio Issues Cautionary Measure (Ord. n. 1851/2026)
TAR Lazio accepts Aylo's interim request, suspending immediate enforcement against Aylo's platforms. Sanctions, warnings, and blocks are frozen. Merits hearing set for March 11, 2026.
February 1, 2026
Second Deadline — Also Missed
The EU-platform compliance deadline passes. Most sites on the list, protected by the TAR Lazio cautionary measure or simply non-compliant, have not implemented age verification. Italy's enforcement is effectively paralysed.
April 2026
TAR Lazio Substantive Ruling — Aylo Wins
The TAR Lazio rules that Italy's age verification obligation cannot be applied to EU-based platforms without following EU e-commerce cross-state procedures. Aylo's platforms remain accessible in Italy. The ruling narrows the obligation to Italian-based and non-EU sites only.
05 / The Legal Core
What EU Legal Argument Did Aylo Use to Win?
Aylo's winning argument rests on the EU's e-commerce directive (Directive 2000/31/EC) and the "country of origin" principle, which establishes that online services are governed by the laws of the member state where they are established — not where their users are located.
The Country of Origin Principle
Under EU e-commerce law, a company established in an EU member state is subject to the regulatory requirements of that member state, not the member states where its services are consumed. Aylo is established in Cyprus. Therefore, according to this principle, it is subject to Cypriot law — not Italian law — when operating across the EU single market.
For Italy to impose its own age verification requirements on Aylo, it would need to invoke the specific derogation mechanisms set out in the e-commerce directive. These mechanisms require a notification procedure involving the European Commission and the member state of establishment — a process that AGCOM had not completed when it placed Aylo on its enforcement list.
Why This Matters Beyond Italy
The Aylo ruling in Italy is legally significant for the entire EU age verification landscape. If the principle holds — that member states cannot unilaterally impose age verification on services established in other EU member states without following cross-state procedures — then France, Germany, Spain, and any other EU country attempting similar enforcement faces the same legal obstacle.
The EU Digital Services Act (DSA) addresses some of these jurisdictional gaps, but implementation timelines and enforcement competencies vary. Until the EU-level framework is fully operational and uniformly enforced, the legal gap exploited by Aylo will remain available to other EU-registered adult platforms.
The Structural Problem
Age verification laws are national; adult platforms are European. The Aylo ruling exposes the fundamental tension: child protection policy is decided at national level, but enforcement against EU-registered digital services requires EU-level coordination that is still being built. Until that coordination is complete, determined platforms can use their EU registration as a legal shield against national enforcement.
06 / Who Must Still Comply
Who Still Has to Comply with Italian Age Verification Rules?
The TAR Lazio ruling narrows the scope of AGCOM's enforcement, but it does not eliminate Italy's age verification regime entirely. Italian-based platforms and non-EU platforms remain fully subject to the rules.
| Platform Type | Compliance Status | Deadline | AGCOM Can Enforce? |
|---|---|---|---|
| Italian-registered platforms | Must comply | Nov 12, 2025 (passed) | Yes — full enforcement |
| Non-EU platforms (US, Canada, etc.) | Must comply | Nov 12, 2025 (passed) | Yes — full enforcement |
| EU-based platforms (Aylo/Cyprus) | TAR Lazio ruling shields them | Feb 1, 2026 (passed) | No — EU cross-state procedure required first |
| Other EU-based platforms | Effectively shielded (risk of identical challenges) | Feb 1, 2026 (passed) | Theoretically yes, practically risky |
| OnlyFans (UK-registered) | Post-Brexit UK — different analysis | Nov 12, 2025 | Likely yes — UK not covered by EU e-commerce directive |
The OnlyFans Special Case
OnlyFans' parent company, Fenix International Limited, is registered in the United Kingdom. Post-Brexit, the UK is no longer covered by the EU e-commerce directive's country-of-origin principle. This means Italy likely does have jurisdiction to enforce its age verification rules against OnlyFans without following EU cross-state procedures — OnlyFans cannot use the same legal shield as Aylo.
OnlyFans was included in AGCOM's list of 48 platforms and has already implemented a third-party age verification system (using Yoti) in several jurisdictions. Italy represents a compliance challenge for OnlyFans under a different legal framework than for Aylo.
07 / Global Context
How Does Italy's Situation Compare to Other Countries' Age Verification Efforts?
Italy is one of more than 25 countries worldwide now implementing or enforcing age verification for adult content — but it is facing the same structural challenge as France, Germany, and Australia: determined platforms have legal or technical routes around national enforcement.
Age Verification Enforcement Status by Country / Region (April 2026)
The Aylo Playbook Across Europe
Aylo has responded differently to age verification laws in different jurisdictions: it blocked all users in France rather than comply, then partially restored access. It was blocked entirely in Australia (from March 2026) after refusing to implement verification. In Germany, courts found it had "prioritised its own financial interests over the objective of protecting minors" and upheld the block. In Italy, it fought in court — and won.
The difference in Italy versus France or Australia: Italy is an EU member state, and Aylo is an EU company. That legal combination creates a jurisdictional shield unavailable in non-EU enforcement contexts. Australia and France's blocking of Aylo was technically straightforward because Aylo was not claiming EU single-market rights against those countries.
The EU Digital Wallet Solution
The European Commission is developing an EU-wide age verification mechanism — an age verification service integrated into EU Digital Identity Wallets that all member states must launch by the end of 2026. This pilot is already active in Denmark, France, Greece, Italy, and Spain. The EU solution is designed on a "privacy-preserving" model where the verification provider confirms the user is 18+ without revealing their identity to the adult site.
If this EU-level solution succeeds, it would dissolve the jurisdictional tension by creating a uniform EU standard that platforms across all member states must implement — removing the country-of-origin defense that allowed Aylo to block Italian enforcement. Our 2025–2030 industry outlook covers how regulatory convergence is expected to reshape the adult content landscape across Europe and beyond. For our detailed analysis of global age verification laws, see our Laws & Regulations coverage.
08 / Summary
Key Takeaways
The TAR Lazio ruling is a significant setback for Italy's regulatory ambitions — but it also clarifies the exact legal fault line between national age verification policy and EU digital single market law.
8 Things to Understand
- The TAR Lazio ruled in April 2026 that AGCOM's age verification rules cannot be applied to EU-based adult platforms (like Aylo/Cyprus) without first following EU cross-state coordination procedures that Italy did not complete.
- Pornhub, YouPorn, and RedTube remain accessible in Italy without age verification — at least until the underlying legal question is fully resolved or the EU-level framework is in place.
- The Decreto Caivano (2023) and AGCOM Delibera n. 96/25/CONS (2025) remain valid Italian law — but the TAR Lazio has significantly narrowed their enforceable scope against foreign EU platforms.
- Italian-based platforms and non-EU platforms (including OnlyFans, which is UK-registered post-Brexit) are still subject to full enforcement and can face fines up to €250,000 and site blocking.
- The EU "country of origin" principle is the legal mechanism Aylo used — a company established in an EU member state is governed by that country's laws, not the laws of every country where its services are consumed.
- Italy's experience mirrors broader EU regulatory dysfunction: child protection policy is national, but digital platforms are European — and the enforcement gap between those two levels remains open until the EU-wide framework is operational.
- The EU Digital Identity Wallet solution, targeted for 2026, could eventually eliminate this legal gap by creating a uniform EU standard that does not depend on each country enforcing its own rules against foreign EU platforms.
- This ruling has systemic implications — proceeding against other EU-based adult platforms on AGCOM's list now exposes AGCOM to identical legal challenges, effectively freezing enforcement against the entire EU-registered segment of the market.
