A checkbox asking for the customer's age is not an age check, it is a claim made by the person ordering. Anyone selling alcohol, knives, fireworks, video media or e-cigarettes needs an unbroken chain of classification, verification, shipping control and proof. This article shows which duties follow from the German Youth Protection Act and the Interstate Treaty on the Protection of Minors in the Media, and how to map them technically in an online shop.
What youth protection law demands of online retail
Two sets of rules interlock. The Youth Protection Act governs the supply of physical goods and storage media, while the Interstate Treaty governs offerings in broadcasting and telemedia, and therefore also the content your shop itself delivers. A wine merchant operates under the first set of rules, a provider of adult content additionally under the second. Both cases end in the same technical problem: before dispatch, the shop has to know how old the person at the other end of the order is.
The Youth Protection Act distinguishes two groups of people. Children are persons who are not yet 14 years old; adolescents are 14 but not yet 18 years old (JuSchG). Different thresholds follow from this split for each product group. A single field holding the value 18 plus in the article master does not represent that, because beer and spirits sit on different levels within the same shop, and tobacco products follow a third rule again.
For online retail, the statutory definition of mail order is the decisive sentence. The law describes it as a transaction for consideration by way of ordering and dispatch without personal contact between supplier and orderer, or without technical or other precautions ensuring that no dispatch to children and adolescents takes place (JuSchG). The second half of that sentence is the real lever: whoever takes those precautions and can prove their effect operates outside the mail order concept the law has in mind.
Goods and content are regulated separately, but in the shop they run through the same stations. Build the verification chain properly once and you serve both cases without maintaining them twice. How to put such requirements in writing beforehand is described in the article on the requirements specification for shop projects.
Assortment classification: every article gets a level
The first step is data work, not programming. Every article receives two attributes: the age level and the legal basis it follows from. The legal basis looks like a nice-to-have, but it is the difference between a claim and a proof. Months later it explains why an article sits at a particular level, and it makes bulk changes to the catalogue traceable.
The levels do not come from gut feeling. Beer, wine, wine-like drinks and sparkling wine as well as their mixtures with non-alcoholic drinks may not be supplied to children and adolescents under 16 years of age, and other alcoholic drinks may not be supplied to children and adolescents at all (JuSchG). Weapons and ammunition follow a separate provision: handling them is permitted only to persons who have reached the age of 18 (WaffG). Explosive substances, apart from pyrotechnic articles of category F1, may not be transferred to persons under 18 (SprengG).
| Product group | Age threshold | Legal basis | Mail order route |
|---|---|---|---|
| Beer, wine, wine-like drinks, sparkling wine | 16 and over | Section 9 JuSchG | permitted with precautions |
| Spirits and other alcoholic drinks | 18 and over | Section 9 JuSchG | permitted with precautions |
| Tobacco products, nicotine-containing products | 18 and over | Section 10 JuSchG | excluded towards children and adolescents |
| Electronic cigarettes without nicotine | 18 and over | Section 10 JuSchG | excluded towards children and adolescents |
| Weapons and ammunition under weapons law | 18 and over | Section 2 WaffG | permitted with precautions |
| Pyrotechnics of category 2 (F2) | 18 and over | Section 22 SprengG, Section 22 1. SprengV | supply to consumers only around New Year |
| Video media unlabelled or not released for minors | 18 and over | Section 12 JuSchG | excluded from mail order |
Two rows of the table deserve particular attention. Tobacco products, other nicotine-containing products and their containers may neither be offered to children and adolescents by mail order nor supplied to them that way, and the same rule applies to nicotine-free products such as electronic cigarettes or electronic shishas (JuSchG). Fireworks of category 2, commonly labelled F2, may in turn be supplied to consumers only in the period from 29 to 31 December (1. SprengV) - that is a calendar rule, not an age rule. How much such mandatory information depends on clean product data is also shown by the article on the energy label obligation in the shop.
The moment of verification decides the effort
The most common flawed design is a single question shortly before payment. It comes too late for choosing the assortment and too early for the delivery. Five stations with clearly separated tasks carry more weight, as the graphic above shows. Each station has its own branch for the case that verification fails at that point.
- Catalogue: the article carries its age level visibly. Filters, search and recommendations take it into account so that a 15-year-old visitor does not enter a process she cannot complete.
- Cart: the cart calculates the highest level across all line items. A cart holding detergent and vodka is an 18-plus cart, and the display says so.
- Checkout: this is where the verification method is decided. The proof belongs before payment, otherwise you get a reversal case instead of an abandoned order.
- Shipping method selection: only methods with a handover check remain selectable. A drop-off authorisation and a parcel box are mutually exclusive with age-restricted goods.
- Delivery: the courier checks the identity document and reports the result back. Only that feedback closes the chain and turns it into proof.
The effort is distributed differently than it first appears. Stations one and two are pure data logic and cost little development time. Station three is the actual business decision and needs to be aligned with data protection. Stations four and five depend on your carriers and therefore on the integration of shipping interfaces.
A cart holding beer and spirits carries two thresholds. Applying the higher threshold to the entire cart is legally safe, but you lose the whole order as soon as verification fails. The more customer-friendly variant splits the cart into two deliveries and ships the uncritical part right away - technically a partial delivery, not a cancellation.
Identification and authentication are two steps
The Interstate Treaty requires a closed user group for certain offerings. In telemedia such offerings are permissible if the provider ensures that they are made accessible to adults only (JMStV). The requirements for the systems securing such a group are laid down by the Commission for the Protection of Minors in the Media in agreement with the recognised bodies of voluntary self-regulation (JMStV). That gives you a yardstick against which a method can be measured.
The core of the procedure follows from the Commission's framework. Under the framework in force since 12 May 2022, at least the one-time identification of applicants for a closed user group must generally take place through personal contact, that is a face-to-face check in the presence of both parties with a comparison of official identity data (KJM). Methods that estimate age biometrically carry a surcharge: anyone who is to gain access to content rated 18 and over must be recognised by the system as being at least 23 years old (KJM).
Identification
One time, through personal contact or a method assessed as equivalent. The result is a verified date of birth, not a ticked checkbox.
Authentication
On every subsequent access. It ensures that the identified person is acting in person and not a member of the household sharing the same account.
Documentation
Method, timestamp and result are recorded without storing the image of the identity document - it is not needed for the purpose.
For shipping goods the requirement is lower than for adult content, yet separating the two steps pays off there as well. A customer who has been verified once should not have to go through the same procedure on her second purchase. That noticeably lowers the abandonment rate in the checkout. How many methods are available in principle is shown by the stock of assessed schemes: in June 2022 the Commission counted 99 positively assessed concepts and modules for age verification systems, plus eight overarching youth protection concepts (KJM).
The handover check at the front door
The cleanest verification in the checkout helps little if the parcel is then left in the hallway. The shipping route is therefore part of the age check and not a downstream logistics question. In practice that means four decisions that belong in the shop and not in a work instruction in the warehouse.
- Filter shipping methods: for line items at 16 or 18 and over, only methods with a documented handover check remain selectable. Parcel lockers, drop-off authorisations and delivery to neighbours drop out.
- Book the check level: the carrier needs the age level as a booking attribute. It travels with the shipping label into the transport system, not into a free-text field on the delivery note.
- Handle returns: if the check fails, the consignment goes back. The shop needs its own status for that so the credit note is not booked as an ordinary withdrawal and distorts the statistics.
- Offer collection: in the store the check is easiest to perform, provided the process foresees it. What such a workflow looks like is described in the article on click and collect.
The case of video media shows how tight the requirements can become. Video media that are unlabelled or carry the marking without release for minors may neither be offered nor supplied by mail order (JuSchG). For such titles the shipping route is therefore not a question of the check level but simply ruled out; collection with an identity check remains. Which methods your carriers actually offer is clarified fastest by looking at the shipping integration.
Implementation in the shop: fields, rules, shipping methods
In Shopware in the Community Edition the chain can be built with on-board tools and a manageable extension. The age level becomes a custom field on the product, the legal basis a second one, the shipping window a third. The rule builder evaluates the highest level in the cart and hides shipping methods that do not provide a handover check.
The actual extension sits in two places: a verification step at order completion that stores method, timestamp and result on the order header, and an event that hands the age level over to the shipping system. For notifying customers and the warehouse the Flow Builder is sufficient, provided the events are triggered in the right places.
{
"product_number": "SW-10023",
"age_level": 18,
"legal_basis": "JuSchG 9 para. 1",
"check_on_delivery": "id_document",
"shipping_window": null,
"proof_before_payment": true
}
{
"product_number": "SW-40881",
"age_level": 18,
"legal_basis": "SprengG 22 para. 3",
"check_on_delivery": "id_document",
"shipping_window": {"from": "12-29", "to": "12-31"},
"proof_before_payment": true
}Two details decide maintainability. First, the age level belongs on the article and not on the category, because assortments get restructured and categories move around while the legal position of the individual article stays put. Second, the field needs a history: if an article changes level today, it must remain recognisable later which level applied at the time of a particular order.
Documentation: what counts in a dispute
An age check that is not documented has, in case of doubt, not taken place. The chain of proof has to remain readable without access to the running system, because an enquiry arrives months after the order. The same care pays off for other mandatory information, for instance the warranty notice or the authenticity notice for customer reviews. Five building blocks belong to every order containing age-restricted items.
- age level and legal basis per line item, frozen at the time of the order
- verification method, timestamp and result, without storing the image of the identity document
- the booked shipping method including check level and the carrier's confirmation
- the result of the handover including failed delivery attempts and returns
- a reference to the state of the classification so that later corrections leave the old transaction untouched
Administrative offences under the Youth Protection Act can be sanctioned with a fine of up to fifty thousand euros, and in certain cases up to five million euros (JuSchG). The Interstate Treaty provides for fines of up to 500,000 euros and, in the cases of paragraph 1 numbers 11 to 24, up to two million euros (JMStV). The framework says nothing about the amount in an individual case, but it shows the order of magnitude these rules operate in.
Special cases that projects often overlook
Three constellations come up regularly in shop projects and are rarely covered by default settings. They cost little effort when they are known at the start, and a great deal when they surface only after go-live.
Labelling on the product
The age rating of video media has to be indicated on the medium and on the case. On the front of the case the mark measures at least 1,200 square millimetres and on the medium itself at least 250 square millimetres (JuSchG). Providers of digital services must clearly point out an existing rating, in the shop therefore on the product.
Warning notice on alcopops
Sweet alcoholic drinks within the meaning of the German alcopop tax act may be placed on the market commercially only with the notice about the supply ban to persons under 18 under Section 9 of the Youth Protection Act (JuSchG). The notice belongs on the packaging and in the mandatory product information.
Time window instead of an age threshold
Category 2 pyrotechnics, sold as F2, is a calendar case: supply to consumers is permitted from 29 to 31 December and, if one of those days is a Sunday, already from 28 December (1. SprengV). The shop needs a date rule alongside the age rule.
A fourth point concerns the age levels themselves. The Interstate Treaty knows the levels without age restriction, 6 and over, 12 and over, 16 and over and 18 and over (JMStV). The Youth Protection Act labels films and game programmes with five corresponding statements, from release without age restriction to the note without release for minors (JuSchG). The provider may fulfil the duty through technical or other means, through an age label readable by youth protection software, or through the choice of the time at which an offering is accessible (JMStV). Keeping both systems in a single field saves a migration later on.
From the assortment to a robust verification chain
The path stays manageable when the order of steps is right. Classification comes first: which article carries which level, on which legal basis? That work belongs to the business department and not to development. Then follows the moment of verification, then the shipping methods, and finally the documentation. A consulting session on process capture clarifies in advance which product groups in the assortment are affected at all.
The chain is tested at its branches, not on its main path. A mixed cart, a failed check, a return after an unsuccessful handover, an article that changes level between order and dispatch: those are the cases that cost money in daily operations. With automated end-to-end tests they can be pinned down so that a later rebuild does not quietly disable the verification chain.
This article is based on data from the German Youth Protection Act, the Interstate Treaty on the Protection of Minors in the Media, the German Weapons Act, the German Explosives Act with its First Ordinance, and the Commission for the Protection of Minors in the Media. The figures cited refer to the state of the respective publication.
A checkbox is a self-declaration and only documents that a statement was made. For mail order the law requires that technical or other precautions ensure that no dispatch to children and adolescents takes place (JuSchG). In practice the chain only becomes robust with a check during the order process and a control at handover.
Tobacco products, other nicotine-containing products and their containers as well as nicotine-free electronic cigarettes and shishas may neither be offered nor supplied to children and adolescents by mail order. Video media without a label or without a release for minors are likewise excluded from mail order. In these cases only a sales route with personal contact helps, for example collection in the store.
The cart carries the highest age level of its line items. Technically there are two clean routes: you apply that level to the entire cart, or you split the cart into two deliveries and ship the uncritical part independently. The second variant is more demanding in logistics but rescues the revenue when the check fails on one item.
You need to record the age level and legal basis per line item, the verification method with timestamp and result, the booked shipping method including check level, and the result of the handover. The image of the identity document is not needed for that and should be avoided for data protection reasons. What matters is that the entries are frozen at the time of the order and that later catalogue changes do not overwrite them.
The statutory framework reaches up to fifty thousand euros under the Youth Protection Act and up to five million euros in certain cases, and up to 500,000 euros under the Interstate Treaty with up to two million euros in certain cases. The framework describes the upper limit, not the standard case. Beyond the fine there is the effort of an official enquiry, which a documented verification chain shortens considerably.
The technical part is typically feasible within a few weeks once the classification of the assortment is in place. What usually takes longer is the data work in the catalogue and the alignment with carriers about the available check levels. We record the current state in a workshop, implement the extension in the shop and accompany the go-live; talk to us about it.