FTC and Utah take action against Pornhub operators over child abuse and nonconsensual content

The US Federal Trade Commission (FTC) and the state of Utah have announced legal action against Aylo, the parent company of Pornhub, YouPorn, RedTube, and more than 100 other pornography sites, over allegations that it failed to stop child sexual abuse material (CSAM) and nonconsensual sexual content (NCM) from spreading on its platforms.

Under a proposed settlement, Aylo will pay a $5 million penalty to Utah and must implement strict measures to prevent the publication of illegal and harmful content.

What the FTC and Utah found

The FTC and Utah allege that, despite advertising a ‘zero tolerance’ policy, Aylo allowed:

• Tens of thousands of CSAM and NCM videos to circulating on its sites.
• Uploaders of abusive material to continue posting, even after their content was flagged.
• Re-uploading of previously identified CSAM, despite promises to use technology to block it.
• Promoted content under exploitative categories like “schoolgirl” and ‘less than 18.’

The complaint also said Aylo only took stronger action in 2020 when credit card companies threatened to cut ties and media coverage drew attention. Internal audits revealed large volumes of CSAM and NCM, yet the company often ignored staff recommendations to remove them.

Privacy violations

The FTC further accused Aylo of mishandling sensitive personal data of people who joined its “model program” to appear in videos. The company allegedly:

• Kept government IDs and Social Security numbers indefinitely.
• Failed to encrypt or securely store the data.
• Misled participants by promising strong security protections that were not in place.

The proposed order

If approved by a federal court, the order would legally require Aylo to:

• Block CSAM and NCM before publication using verified policies, procedures, and technical safeguards.
• Verify the age and consent of every person appearing in uploaded content.
• Remove old content unless participants are confirmed to have been at least 18 and consenting at the time.
• Improve privacy protections, including proper encryption and access controls.
• Post a public notice on its sites about the case and the new obligations.

Although the order imposes a $15 million penalty, most will be suspended once Aylo pays the $5 million owed to Utah.

Why this matters

Pornhub and other Aylo-owned platforms attract hundreds of millions of visitors each month, making them some of the world’s largest pornography sites. Regulators argue that their failure to block CSAM and NCM has caused serious harm to children and nonconsenting adults, revictimizing those already exploited.

For civil society, this case highlights long-standing concerns about the accountability of large online platforms. It demonstrates how governments can pressure tech companies to prioritise human rights, safety, and data protection over profits, while also raising broader questions about how to regulate online pornography in a way that protects vulnerable people.