Free Shipping on orders of 60 euros or more*

CBD Shops and Age Verification: Best Practices

Age and Identity Verification at CBD Stores

The sale of CBD to minors is strictly prohibited in France. The minimum legal age is set at 18, with no exceptions, for all cannabidiol-based products: flowers, oils, resins, cosmetics, and pet products. The responsibility for enforcing this rule rests entirely with the retailer, whether they operate a physical store or an online shop.

The Public Health Code and MILDECA’s recommendations are in agreement on this point: the ban on sales to minors is not an optional precaution; it is a legal obligation, and failure to comply with it is subject to criminal and administrative penalties.

Key points to remember:

  • The purchase and use of CBD are prohibited for individuals under the age of 18 in France, with no commercial exceptions.
  • The retailer must systematically verify the customer’s age before any sale and refuse the transaction if there is any doubt or if the customer cannot prove they are of legal age.
  • This requirement applies to all forms of CBD: flower buds, oils, capsules, e-liquids, and infused products.
  • MILDECA classifies this ban as a “protective prohibition,” on par with those on alcohol and tobacco.
  • The packaging must explicitly state that the product may not be sold to minors, as well as health warnings for pregnant women.

CBD regulations in France are based on the decree of December 30, 2021, issued pursuant to Article L. 5132-8 of the Public Health Code. A CBD product is legal for sale provided that it is derived from Cannabis sativa L. varieties listed in the European catalog and that its THC content is 0.3 percent or less . Above this threshold, the product falls into the category of narcotics.

Check out our detailed infographic outlining the various age verification steps for purchasing CBD.

For retailers, compliance goes beyond the product’s composition. Each batch must be accompanied by a certificate of analysis issued by an independent laboratory, certifying the THC content. These documents must be retained for at least five years, as they serve as proof of good faith in the event of an inspection.

A Senate amendment from 2025 strengthened this measure by proposing to explicitly extend the ban on sales to minors and the prohibition on distribution via vending machines to herbal smoking products, including CBD, following the model of the provisions already in place for tobacco and vaping.

Documentation Requirements and Penalties:

  • Keep the certificates of analysis for each batch, as well as the invoices and delivery slips.
  • Purchase professional liability insurance tailored to the CBD industry.
  • Do not make any therapeutic claims: statements such as “reduces anxiety” or “helps you sleep” constitute deceptive marketing practices.
  • In the event of a sale to a minor, penalties may include criminal prosecution, closure of the retail location, and seizure of inventory.

Pro Tip: Always display the certificates of analysis for your batches on your website or in-store. This transparency builds credibility with adult customers and demonstrates your compliance with regulatory authorities.


How do you verify customers' ages at a brick-and-mortar CBD store?

In physical stores, presenting a valid form of identification remains the standard procedure. A national ID card, passport, or residence permit—any official document bearing a photo and date of birth is acceptable. The salesperson is not required to photocopy the document but must visually verify its authenticity and ensure it matches the customer’s appearance.

Staff training is an often-underestimated tool. An inadequately trained employee may hesitate to ask for identification for fear of offending a customer, or may accept a document that is clearly expired. A written procedure—provided to each team member upon hiring and regularly reviewed—reduces these discrepancies.

Best Operational Practices:

  • Prominently display, at the entrance and at the cash register, the regulatory warnings stating that sales to minors are prohibited (Articles L. 3342-4 and D. 3512-9-1 of the Public Health Code).
  • Apply the rule of doubt: if a customer’s age seems uncertain, always ask for identification, without exception.
  • If the other party refuses to provide a document, refuse the sale without negotiation.
  • Train staff to defuse conflict situations calmly, reminding them that refusal is a legal obligation and not a personal judgment.
  • Never record or retain the customer’s personal information: verification is visual, not based on documents, which avoids any compliance issues under the General Data Protection Regulation (GDPR).

What age verification requirements apply to an online CBD store?

For e-commerce, the recommended approach combines two levels of verification. A two-step verification system that combines a pop-up blocker at the site’s entrance with a checkbox confirming the user is of legal age during the order confirmation process is now the industry standard.

Age Verification on a Tablet

The entry modal must be rendered on the server side or injected via a script, without relying on the browser’s JavaScript settings. It features two clearly labeled buttons: “I am 18 or older” and “I am under 18.” If the user declines, they are redirected to an external page or a page with information on responsible consumption, with no way to bypass the block.

Technical mechanisms and associated requirements:

  • Use a persistent cookie to store the age verification result so that the user is not required to go through the same verification process on every visit.
  • Add an explicit checkbox at checkout, separate from the general terms and conditions of sale.
  • Include a clause in the general terms and conditions of sale requiring customers to present proof of identity to the delivery person, in accordance with industry recommendations on identity verification upon delivery.
  • Ensure that the modal does not hide the content from web crawlers (Googlebot, Bingbot): the content must remain accessible to search engines while being blocked from unverified users.
  • Compliance with the GDPR: The age gate must not trigger advertising trackers until the user has confirmed that they are of legal age.

Failure to have a compliant age gate can result in the loss of your merchant account with payment processors such as Stripe or Mollie, as well as the termination of your relationship with carriers such as Colissimo, DHL, or UPS, which now require documented proof of legal age for CBD and vaping products.


What recommendations have health authorities made to improve the reliability of age verification?

MILDECA bases its ban on sales to minors on documented risks to young people’s neurological development. Since brain maturation continues until about age 25, any early exposure to cannabinoids poses increased risks, regardless of the residual THC level in the product.

The CBD certificate of analysis is available in-store for review.

The clear display of health warnings on all product pages—not just in the footer—is an explicit recommendation from the authorities. A notice buried in the terms and conditions or written in 8-point font does not meet the requirement for actual visibility, which is monitored by the DGCCRF.

Sector-Specific and Health Recommendations:

  • Display legal warnings (not for minors, not recommended for pregnant women) on each product page, below the "Add to Cart" button, with sufficient contrast.
  • On mobile devices, use accordions or tabs dedicated to legal information to maintain readability without compromising the browsing experience.
  • Update internal procedures as soon as there is a change in laws or regulations: the CBD sector is subject to frequent changes, particularly regarding food products and synthetic cannabinoids.
  • Train teams at least once a year on age verification requirements and refusal procedures, and document these training sessions.
  • Do not rely solely on the user’s statement: case law tends to hold that a simple checkbox, without accompanying documentation, is no longer sufficient to provide the seller with legal protection in the event of a dispute.

Pro tip: For online sales, include a requirement in your Terms and Conditions that the delivery person must present a form of identification for every order. This measure creates a third level of oversight and serves as a strong defense in the event of a DGCCRF inspection or a legal dispute.


Pure-extract-cbd: Compliant Products for Discerning Retailers

https://pure-extract-cbd.com

Pure-extract-cbd offers a range of legal CBD products made from organic hemp, each accompanied by independent certificates of analysis for every batch. Each product complies with the legal THC limit of 0.3% and bears the required regulatory warnings, including a prohibition on sales to minors.

For retailers looking to source products from a supplier that is transparent about traceability and compliance, Pure-extract-cbd offers a selection of certified CBD flowers and tested oils, delivered quickly along with all the documentation required for legal resale in France.


Key Points

Verifying that a customer is of legal age is a non-negotiable legal requirement for all CBD retailers in France, and failure to comply may result in criminal liability for the seller.

Point Details
Minimum legal age You must be at least 18 years old, without exception, to purchase any CBD products in France.
Documentation Requirement Retain the certificates of analysis for each lot for at least five years.
Brick-and-mortar store Always ask for valid identification; refuse to make the sale if you have any doubts.
Online Store Combine a modal block at the entry point, a checkbox at checkout, and verification upon delivery.
Penalties for Noncompliance Criminal prosecution, closure of the retail location, and loss of the merchant account with payment processors.

Recommendation

More articles