The law requires that you be able to prove everyone appearing in your content is a consenting adult, and that proof is a recordkeeping obligation with real legal weight. In the United States the governing law is known by its section number, 2257, and it sits behind the verification steps the platforms put you through and the records you are expected to keep yourself. This is not legal advice, the requirements are specific and have been read strictly, and an attorney who works in adult compliance is the right person for the details. What this article does is lay out the shape of the obligation so none of it catches you unprepared.
One line comes before everything else and is not negotiable. Content involving anyone who is, or who appears to be, a minor is illegal everywhere, carries severe criminal penalties, and is never a question of platforms or hosting or paperwork. The entire verification system exists for one reason, to make certain that line is never crossed and that you can prove it was not. Everything below is the machinery that backs up that single absolute.
For sexually explicit content, the law treats you as a producer, and a producer has to verify and document the age and identity of every performer. In practice that means collecting a valid government-issued photo ID showing date of birth from each person, keeping a signed release that records their legal name, any stage names they use, and their date of birth, identifying the specific content, and maintaining a cross-reference that links each piece of content to everyone in it under every name they have gone by. Those records have to be retained and kept available for inspection, and a designated custodian of records, named in a compliance statement on the content, holds them at a physical address. The penalties for failing at this are criminal rather than a civil fine, up to and including federal prison and the forfeiture of your content, which is why it sits at the serious end of everything in this chapter.
This applies to you even when you are the only person in your content. You are the producer of material depicting yourself, so you keep your own age documentation and you are effectively your own custodian of records. The obligation has no solo exemption, and the moment a second person appears in anything you make, you must have their ID and their signed release on file before you publish it, never as something to gather afterward. There is no version of getting the paperwork later, because the record has to exist at the point the content is produced.
The obligation reaches further than the person who held the camera. The law’s definition of a producer has been read to include those who publish, reproduce, or reissue explicit material and not only those who shot it, so you cannot sidestep the records by distributing content someone else made. If it goes out under your name, you are expected to hold the records for everyone in it, which is one more reason collaborations and reposts need the documentation handled before anything is posted.
The custodian-of-records requirement creates a privacy problem with a standard solution. The records must be available at a physical address named on your content, and you almost certainly do not want that to be your home. A third-party custodian-of-records service exists precisely for this, holding and making your records inspectable at their address so your own never appears on your work, which is a normal and legal arrangement rather than a dodge. Set that up as part of going compliant, and the identity-protection article later in this chapter covers keeping your home and legal details off your public-facing work more broadly.
Once you are keeping these records you are holding sensitive legal identities, your own and those of anyone you film, and that makes you responsible for protecting them. Copies of government IDs are exactly the kind of data that does real harm if it leaks, so store them securely and with access limited, and treat a collaborator’s ID with the same care you would demand for your own. Handing your ID to someone careless is a risk you would not accept, so do not be the careless one holding someone else’s.
Your performer records are one of three separate verification things worth keeping straight. One is the recordkeeping just described, which proves who is in your content. Platforms also run their own verification on you before you can upload or get paid, increasingly paired with demands for performer and consent documentation, a tightening driven now as much by the card networks’ rules as by the government. And a growing wave of state and national laws now requires adult sites to confirm that visitors themselves are adults, which is reshaping where platforms operate and who can reach your content. The platform and viewer checks are distinct from your own records but part of the same environment, and both are changing quickly, so verify the current state rather than assuming last year’s rules.
These records do more than establish age, they establish consent, that the person agreed to be filmed and agreed to how the content would be used and distributed. That consent piece matters as much legally and ethically as the age piece, and it grows more involved the moment your content includes anyone besides you, which is exactly where the next article picks up.
Treat all of this as the map rather than the advice itself, and get an attorney who actually works in adult compliance for the exact requirements, the retention periods, and the wording of the statement, since the details are specific and read strictly. The records are at their simplest when you are the only person involved, and they multiply the instant someone else is in the frame: the IDs, the releases, the consent, and the safety of everyone present. That is the next article, on filming with partners, where the content, the safety, and the paperwork all come together.