Age checks in Italy: what AGCOM’s “double anonymity” means for adult sites
Italy’s regulator AGCOM requires adult sites to verify age through a “double anonymity” model: an independent, certified third party confirms that the visitor is an adult, and the site never learns who they are. The rules apply from 12 November 2025. Here’s how the model works, what a good Italian gate looks like, and how to check your site.
Summary of the official sources · checked 20 October 2026 · Not legal advice. · Sources at the end
Applies from12 November 2025 for listed Italian and non-EU operators; for operators based in other EU countries annulled by TAR Lazio (7 Apr 2026)
WhoAdult sites reachable from Italy
RuleDelibera 96/25/CONS · AGCOM
Effort to fix1–2 days with a certified provider
What does a visitor from Italy meet on your site? Find out in about a minute.
Free · private · we never download your images or videos
In short
- AGCOM’s delibera 96/25/CONS (8 April 2025) sets how adult sites must verify age.
- Double anonymity: a certified third party confirms the age; your site gets the answer, not the identity.
- According to AGCOM, the rules apply from 12 November 2025 to Italian and non-EU operators on AGCOM’s list. AGCOM set 1 February 2026 for listed operators based in other EU countries; on 7 April 2026 the Lazio administrative court annulled that part (TAR Lazio, judgment 6283/2026; as of 20 October 2026).
- Under AGCOM’s procedure (Delibera 96/25/CONS), a listed operator that doesn’t comply receives a formal notice with 20 days to comply, after which blocking can be ordered.
Does this apply to your site?
These questions help you see whether the Italian model affects you.
- ✓
People in Italy can reach your explicit contentAGCOM applies its rules to operators on its list; for operators based in other EU countries, the Lazio administrative court annulled that part on 7 April 2026 (as of 20 October 2026). A lawyer can confirm whether that’s you.
- ✓
You verify age yourself, by asking or by collecting IDThe Italian model puts an independent third party in between, so you don’t learn who the user is.
- ✓
Explicit previews load before any checkA check only helps if the content waits behind it.
- ?
Your company is established in another EU countryAGCOM set 12 November 2025 for Italian and non-EU operators on its list and 1 February 2026 for listed operators based in other EU countries; the Lazio administrative court annulled the latter part on 7 April 2026 (as of 20 October 2026). A lawyer can confirm whether that’s you.
What regulators expect
- Work with a certified third-party provider. The provider confirms age and passes your site only the result.
- Don’t collect identity data yourself. That is the point of double anonymity: your site gets “adult: yes/no”, nothing more.
- Keep explicit content behind the result. Pages, media files and indexes open only after a confirmed check.
- Keep the notice period in mind. If AGCOM writes to you, you have 20 days. Have your setup documented before that happens.
AGCOM’s two pages on start dates don’t fully match. We show the start date both agree on and flag the other one.
What a good Italian age gate looks like
Contenuti per adultiVerifica la tua età in modo anonimo
Neutral entry page
Explains why a check is needed and that your identity stays private.
Verifica etàFornitore certificato · doppio anonimato
Third-party step
The certified provider checks age on its own page.
✓ 18+ confermato
“Adult: yes” only
Your site receives a yes/no token, not a name or document.
How No451 checks your site
We scan from an Italian connection, see what kind of gate a first-time visitor meets, and look at your sitemaps and media lists to see whether files open around the gate. We send header requests only and never download media.
Should fixYour media are listed in a public index Example resultYour sitemap and media list name 125 media files. We checked 16 of them: all 16 open for an anonymous visitor, no age check in between.
The fix: take media out of sitemaps and public media listings, and protect the files themselves.
Your age checkWhat kind of check a first-time visitor meets
Before the checkWhat’s visible behind the gate
Media filesWhether files open without passing
Public indexesSitemaps and media lists
Fake “over 18” cookieWhether a made-up cookie opens the gate
Common mistakes
- Building your own ID upload. It’s the opposite of double anonymity.
- A check that only runs on the home page. Deep links and inner pages stay open.
- Media listed in the sitemap. Search engines and anyone else can fetch the files directly.
- Waiting for the notice. 20 days is short for a provider integration.
- Storing identity data “just in case”. Double anonymity means your site gets the answer, not the person. Don’t collect what the model is designed to keep away from you.
Enforcement
AGCOM supervises the rules. Under AGCOM’s procedure (Delibera 96/25/CONS, art. 13-bis(5) of Decree-Law 123/2023), a listed site that doesn’t comply receives a formal notice with 20 days to fix it; after that, AGCOM can order blocking and apply sanctions.
Questions operators ask
What does “double anonymity” mean?
An independent, certified third party confirms that the user is an adult. The site learns only that answer, not who the user is.
When do the Italian rules apply?
From 12 November 2025 for Italian and non-EU operators on AGCOM’s list. For listed operators based in other EU countries, AGCOM set 1 February 2026; the Lazio administrative court annulled that part on 7 April 2026, so AGCOM first has to go through the operator’s home country and the European Commission (TAR Lazio, judgment 6283/2026; as of 20 October 2026). A lawyer can confirm whether that’s you.
Can I use the same provider as in other countries?
Only if it offers AGCOM’s double-anonymity model. Ask the provider directly.
Does No451 check that my provider is certified?
No. We see what visitors meet and what opens around your gate. Certification is between your provider and AGCOM.
What should I ask a provider for Italy?
Ask whether they are certified for AGCOM’s double-anonymity model, whether your site ever receives identity data (it shouldn’t), and how the yes/no answer reaches your server. Keep their answers on file.
Sources
Not legal advice. This page summarises and links to primary sources; it does not tell you what the law requires of your specific site. Related: Italy overview · DSA in Italy · Fix guide: lock your media files
See what a visitor from Italy sees. Then close the side doors.
One scan from an Italian connection shows your gate and which files and indexes open without it, with evidence and fixes.
No signup for the first result · built by people who run an adult site themselves