Verify adult eligibility
North Carolina's definition of a minor generally covers an individual younger than 18 who is not married or judicially emancipated. Covered sites must verify age before allowing access to material harmful to minors.
North Carolina Age Verification
Prove you’re old enough. Keep your identity private.
If your website or digital service needs to verify that a user is 18 or older in North Carolina, Age App provides privacy-first, session-based age verification without requiring your platform to receive the user's underlying identity information.
01
Verify 18+ eligibility
02
Reduce identity exposure
03
Session-based verification
04
Built for digital integration
North Carolina age verification requirements
Verify age without turning your platform into an identity database.
North Carolina's Pornography Age Verification Enforcement Act, or PAVE Act, establishes age-verification requirements for certain commercial entities that publish or distribute material harmful to minors online.
Under N.C. Gen. Stat. § 66-501, a commercial entity that knowingly and intentionally publishes or distributes material harmful to minors on the internet from a website containing a substantial portion of such material must verify the age of individuals attempting to access the material.
North Carolina defines a “substantial portion” as more than thirty-three and one-third percent of the total material on a website meeting the statutory definition of material harmful to minors.
Verification may be performed using a commercially available database regularly used for age and identity verification or another commercially reasonable method of age and identity verification.
The statute also contains a direct data-minimization rule: identifying information may not be retained after access to the material has been granted.
North Carolina PAVE Act — G.S. 66-500–66-501
What North Carolina businesses need to understand
The North Carolina PAVE Act regulates certain commercial websites that knowingly and intentionally publish or distribute material harmful to minors.
A covered website containing a substantial portion of such material must use a qualifying age-and-identity verification method before allowing access.
The statute permits use of a commercially available database regularly used by businesses or governmental entities for age and identity verification, or another commercially reasonable method of age and identity verification.
North Carolina also prohibits the commercial entity or a third party performing the required verification from retaining the individual's identifying information after access has been granted.
The law creates civil liability and permits actions by a parent or guardian whose minor was allowed access, as well as by a person whose identifying information was retained in violation of the statute.
Requirements
What does North Carolina require?
The law establishes specific requirements for covered businesses. Your verification architecture should reflect both the applicable legal requirement and the privacy expectations of your users.
Use a qualifying verification method
Verification may use a commercially available database regularly used for age and identity verification or another commercially reasonable method of age and identity verification.
Do not retain identifying information
The commercial entity or third party performing the required verification may not retain identifying information after access has been granted.
Connect verification to restricted access
Verification should be part of the actual access-control flow for covered material rather than a simple self-attestation screen.
Privacy-first age verification
Age verification shouldn’t mean giving up your privacy.
A person can be willing to prove they are old enough without being comfortable with every website storing a copy of their driver's license, date of birth, face, or other identifying information.
Why do you need my ID?
Are you storing my face?
Can this be traced back to me?
Why should I trust you?
How Age App works
Age App separates identity verification from the relying platform. The user completes verification through Age App, while the platform receives a verification result that can be used to make an access decision.
01 / VERIFY
Complete verification
The user completes setup using an authenticated government-issued ID and a live check.
02 / SESSION
Start a verification session
When a participating website needs to confirm age, the user starts an Age App verification session.
03 / RESULT
Receive the result
The platform receives a verification result indicating whether the required age threshold was met, together with its expiry and cryptographic signature.
04 / ACCESS
Make the access decision
The business uses the verification result to determine whether the user can continue to the protected experience.
Data minimization
What does the website receive?
The goal is simple: answer the age question without giving the relying platform an unnecessary copy of the user's identity.
The platform receives
- Age eligibility
- Pass / fail result
- Verification expiry
- Cryptographic signature
The platform does not receive
- Government-ID images
- Date of birth
- Biometric data
- The user's full identity
Adult websites
North Carolina age verification for adult websites
North Carolina's PAVE Act applies to covered commercial websites where more than 33⅓% of the total material is material harmful to minors. For these sites, age verification must occur before access using a qualifying age-and-identity verification method.
Verification strength
Use a verification approach that provides meaningful assurance that the person attempting to access the protected content meets the applicable threshold.
User experience
Verification should work across modern devices and should avoid unnecessary steps for users who have already established eligibility.
Data minimization
North Carolina law expressly prohibits retaining identifying information after access has been granted.
Security
Understand where identity documents and biometric signals are processed and which systems have access to sensitive information.
Verification expiry
Define how long a verification result remains valid and how expired results are handled.
Auditability
Maintain structured verification records that support internal review without embedding identity documents in your business infrastructure.
Age Verification API
Add North Carolina age verification without rebuilding your product.
Age App can operate as a verification layer for websites, applications, platforms, checkout flows, restricted content, and other age-gated experiences.
User
→
Age App
Verification
Verification
→
Age Eligibility
Result
Result
→
Platform
Access Decision
Access Decision
Why Age App
Stronger assurance. Controlled identity.
Age App is designed to provide age assurance while minimizing the amount of sensitive identity information exposed to the relying platform.
ID-backed age verification
Age App can use an authenticated government-issued ID together with a live check to establish age eligibility.
Privacy-first architecture
The relying platform receives the verification result rather than the user's underlying identity artifacts.
Session-based verification
Verification sessions produce time-limited results that can be used by the relying platform to make access decisions.
Reduced identity exposure
Businesses can avoid building their own repository of government-issued identity documents simply to answer an age question.
Cryptographically signed results
Verification results can include an expiry and signature so the platform can validate the integrity of the response.
Operationally efficient integration
Age verification can be integrated through structured APIs and verification flows without requiring a business to build its own identity-verification infrastructure.
Use cases
Age verification beyond adult content
Different businesses can have different age thresholds and legal obligations. Age App can provide a verification layer for multiple age-restricted experiences.
Adult websites
Establish 18+ eligibility before allowing access to covered age-restricted content.
Alcohol
Support age-verification workflows for applicable alcohol sales and delivery experiences.
Cannabis
Provide age-verification infrastructure for applicable cannabis businesses and digital transactions.
Dating platforms
Establish age eligibility while limiting unnecessary identity information exposed to the platform.
Digital media
Add age verification to restricted streaming and digital media experiences.
Events and venues
Extend verification into physical environments, entry points, and age-restricted transactions.
“I am 18” is not the same as verifying age.
Prepare your North Carolina verification flow
✓
Determine whether your organization is a commercial entity covered by the PAVE Act.
✓
Determine whether more than 33⅓% of the website's total material meets the statutory definition of material harmful to minors.
✓
Verify age before allowing access to covered material.
✓
Use a commercially available age-and-identity database or another commercially reasonable verification method.
✓
Do not retain identifying information after access has been granted.
✓
Define how verification results expire and how renewed verification is handled.
✓
Prevent replay or reuse of expired verification results.
✓
Integrate verification into the actual restricted-content access flow.
✓
Document the verification architecture and data-retention controls.
✓
Review the implementation with qualified North Carolina counsel where appropriate.
Frequently asked questions
North Carolina age verification FAQ
Answers to common questions about North Carolina age verification, adult websites, privacy, APIs, and Age App.
What is the North Carolina age verification law?
Article 51 of Chapter 66 is known as the Pornography Age
Verification Enforcement Act, or PAVE Act. It requires
certain commercial entities publishing or distributing
material harmful to minors online to verify the age of
individuals attempting to access that material.
Does North Carolina require age verification for adult websites?
Yes, for covered commercial websites containing a substantial
portion of material harmful to minors. The statute requires
age verification before access to the covered material.
What counts as a substantial portion?
North Carolina defines a substantial portion as more than
33⅓% of the total material on a website meeting the
statutory definition of material harmful to minors.
What age-verification methods can a covered website use?
Section 66-501 permits use of a commercially available
database regularly used by businesses or governmental
entities for age and identity verification, or another
commercially reasonable method of age and identity
verification.
Can a third party perform age verification?
Yes. Section 66-501 expressly addresses a third party that
performs the required age verification on behalf of a
commercial entity.
Can identifying information be retained after verification?
No. The statute provides that the commercial entity or third
party performing the required age verification may not retain
identifying information after access has been granted.
Who can bring a civil action for a violation?
The statute authorizes a civil action by a parent or guardian
whose minor was allowed access to the material and by a
person whose identifying information was retained in
violation of the law.
What remedies can a court award?
The statute permits relief including an injunction,
compensatory and punitive damages, and specified costs,
expenses, fees, and attorney's fees.
Does Age App guarantee North Carolina legal compliance?
No. Age App provides age-verification technology. Whether a
particular implementation satisfies a business's legal
obligations depends on the business, content, users,
transaction, jurisdiction, and applicable law.
North Carolina resources
Research the requirements.
Legal disclaimer: This page is provided for general informational purposes and is not legal advice. Laws, regulations, interpretations, and enforcement practices can change. Businesses should review the current North Carolina statutes and consult qualified legal counsel before relying on this information for compliance decisions.
Ask about age.
Not identity.
Setup once.
A new live session each time access is asked for.
Powered by
ChainIT™
