The adult content giant faces a decade of audits after allegations of profiting from child sexual abuse and nonconsensual material, and mismanaging sensitive user data.
$5M Settlement Over Longstanding Content Failures
Aylo, the owner of Pornhub and other adult content platforms, has agreed to pay a $5 million settlement to the Federal Trade Commission (FTC) and the state of Utah. The settlement stems from accusations that the company:
- Knowingly profited from child sexual abuse material (CSAM) and nonconsensual material (NCM).
- Failed to block or remove illegal uploads, even after implementing new content policies.
- Collected and mishandled sensitive user and performer data, including Social Security numbers and ID scans.
This resolution comes years after public pressure and a New York Times exposé in 2020 revealed that Pornhub was hosting abusive content, prompting Visa and Mastercard to suspend processing payments on the site.
What the FTC and Utah Allege
Even after introducing age and consent verification measures in late 2020, Aylo allegedly continued to violate consumer protection and safety standards:
- Ineffective moderation allowed hundreds of CSAM videos to be reuploaded between 2017 and 2021.
- Promises to ban offenders were not fully enforced — users banned for uploading CSAM could easily create new accounts using different emails.
- Aylo claimed it would “fingerprint” flagged videos, but the FTC says this technology was not functional for years.
Mishandling of Performer Data
The FTC further alleges Aylo violated users’ privacy rights:
- Performer identity documents collected by a third-party verification vendor were later retained by Aylo indefinitely — without consent or disclosure.
- The sensitive data — including SSNs, birth dates, and addresses — was not encrypted, not stored behind a firewall, and access was not properly restricted.
- Despite this, Aylo told performers their data was “safe” and “secure.”
“Aylo told its models they could trust the company with their personal data, yet failed to use standard security measures,” said the FTC.
What Aylo Must Do Now
As part of the consent decree, Aylo must implement and maintain the following over the next 10 years:
- Verify consent and identity of everyone shown in any uploaded photo or video.
- Enforce strict policies and technologies to detect and block CSAM and NCM across its platforms.
- Remove all content posted prior to these protections unless it meets current verification standards.
- Undergo independent third-party audits to ensure ongoing compliance.
Aylo has agreed to the settlement without admitting wrongdoing, but says it aligns with its ongoing efforts to protect users and performers.
“The resolution reached involved enhancements to existing measures but did not introduce any new substantive requirements that were not either already in place or in progress,” Aylo said in a statement.
A Pattern of Delay and Reaction
This is not the first time Aylo (formerly MindGeek) has made platform-wide changes only after financial and public pressure:
- Content moderation changes in 2020 came after major credit card companies cut ties with Pornhub.
- The company began requiring age verification and consent documents only after widespread scrutiny.
- Despite policy announcements, the FTC alleges poor enforcement and technology failures continued for years.
Industry Impact and Broader Implications
This case highlights how adult content platforms — and other user-generated media platforms — are being held accountable for proactively moderating abusive content and safeguarding user data.
- The settlement may set a precedent for legal liability when platforms fail to prevent CSAM and NCM uploads.
- It also shows growing government focus on how companies handle personal data, especially sensitive biometric and ID information.
- Critics argue that platform responsibility should not require a crisis or public scandal to implement basic safety and privacy standards.
