Age Verification (21+) for THC Products — Regulatory Compliance
Overview
Any e-commerce site selling THC products should implement an age-gate pop-up requiring visitors to confirm they are 21 or older before accessing the site. While not universally mandated across all jurisdictions, this is a widely adopted industry practice and is considered a baseline compliance measure for THC-containing product lines.
The general principle: if a site sells THC products, implement the age gate. The friction cost to legitimate users is negligible, and the risk of omitting it outweighs the minor UX inconvenience.
Recommended Implementation
- Trigger: Display on first visit, before any site content is accessible
- Gate logic: Present a simple 21+ confirmation prompt
- If user confirms → allow access, set a session/cookie so they aren't re-prompted
- If user declines → redirect away from the site (standard practice mirrors alcohol brand sites)
- Scope: Site-wide gate is appropriate when THC products are sold alongside CBD or other products; a product-level gate is insufficient
Regulatory Context
Regulations vary by state and are evolving. Not all THC e-commerce sites currently implement age gates, but many do — particularly those selling Delta 9 THC products. The conservative and defensible position is to implement the gate regardless of whether it is strictly required in every jurisdiction where the site operates.
From the Fieldwell / Take 9 design review (Oct 17, 2025): Caitlin Doak raised the need for a 21+ age verification pop-up specifically because the site carries THC products. The team agreed that "better safe than sorry" was the right posture, noting that the gate is unlikely to deter legitimate buyers and provides meaningful legal cover.
Action Items for Implementation
- [ ] Research current state-level regulations for Delta 9 THC e-commerce age verification
- [ ] Implement a 21+ age-gate pop-up on any site carrying THC products
- [ ] Configure redirect behavior for users who decline (exit or redirect to a neutral page)
- [ ] Set a cookie/session flag to avoid re-prompting returning visitors
Related
- [1]
- [2]
- [3]