The Netherlands Opens Age Verification to Recognised Private Providers — and Tightens Online Alcohol Sales

Two documents, three weeks, one direction

If you sell alcohol online in the Netherlands, The Hague sent you two strong signals this autumn.

On 18 September the Ministry of Health (VWS) opened a consultation on an amendment to the Alcohol Decree (Alcoholbesluit). It allows stricter rules for the age-verification system and makes a physical marking on the outer packaging mandatory. On 5 October the State Secretary for Economic Affairs, W.J.M. Aerdts, sent Parliament the letter Strategie online kinderrechten ("strategy for children's rights online"), which sets out how the cabinet wants online age verification to work.

Read together, they show the direction. The "I am 18+" checkbox stops being the norm, the delivery chain shares the responsibility, and the check itself should reveal as little data as possible.

What the cabinet wrote on 5 October

The letter covers children's rights online broadly and names online alcohol sales as one example of a legal age limit. On age verification it makes three choices that matter to merchants.

1. Public and private. Drawing on TNO research and an expert session led by the Trimbos Institute, the cabinet opts for "a publicly managed mechanism, such as integrating the EU blueprint specification into EDI wallets, combined with a system of recognised trusted third parties" (our translation). Recognised private third parties may offer comparable services, provided they meet set requirements for security, reliability and privacy protection. Several recognised routes, the letter argues, stop any single party from holding everyone's age data.

2. Privacy-enhancing by preference. The cabinet prefers techniques such as zero-knowledge proofs, and says age verification must not become a "general obligation to identify online".

3. Candid about the timeline. The end-2026 target in the Commission's age-verification Recommendation is "niet realistisch in de Nederlandse context" (not realistic in the Dutch context), because of too many legal, technical and organisational thresholds. How quickly age verification will reach the public wallet "will be mapped out". There is no date. (Why the EU date is not a law: The End-2026 Deadline That Isn't a Law.)

What the letter does not do matters just as much. It has no recognition criteria, no procedure and no named supervisor. Right now "recognised" is a policy direction, not a certification anyone can apply for. The letter also notes that the Commission is building an EU scheme with lists of trusted age-verification providers. How a Dutch system would plug into it is still open.

The NL Wallet: later than planned (reported)

The public route runs through the NL Wallet, the Dutch implementation of the EU Digital Identity Wallet. According to De Andere Krant on 21 April 2026, a spokesperson for the Interior Ministry (BZK) confirmed that the launch has slipped by about a year, to the end of 2027. We have not found a primary BZK document with that date, so treat it as reported. Either way, the public age-verification route does not exist in the Netherlands this year, and the letter promises no date for it.

The Alcohol Decree amendment: what is in the consultation

The consultation runs from 18 September to 31 October 2026. It is a draft order in council (AMvB) from VWS, with legislative-calendar ID 27360. The draft amendment does three things:

• A legal basis for stricter rules on the age-verification system. The new Article 5.1 requires the distance seller to establish with an age-verification system that the buyer is 18 before the sales contract is concluded. Further, mainly technical, requirements can follow by ministerial regulation (the Alcoholregeling).
• A mandatory physical marking. The new Article 5.3 requires a visible marking on the outer packaging showing that age must be checked. A NIX18 logo or any other clear 18+ marking will do; a QR code will not, says the memorandum.
• Technical changes, such as moving the social-hygiene training requirements into the Alcoholregeling.

The memorandum backs the need with numbers. The 2024 compliance study found that home-delivery channels had an average compliance rate of 20.2%, so in almost 80% of purchase attempts minors managed to buy alcohol. Between July 2024 and the end of 2025, the food and product safety authority NVWA ran 163 test purchases checking the age limit at delivery. In 85% of them, alcohol was handed to the 17-year-old test buyer.

For privacy, one passage in the memorandum matters most. Data exchanged between the age-verification provider and the seller will be limited to an 18+ attribute: "only a yes/no is exchanged between the age-verification system and the distance seller, and not a date of birth or an age". The ministry is describing a data-minimising age check, almost word for word.

When does it apply? Not yet known. The decree enters into force on a date set by royal decree. At the NVWA's request, the physical marking will start together with a planned Alcohol Act amendment that also makes couriers and other chain partners fineable (parliamentary paper 36 884). The SME test panel asked for a two-to-four-year implementation period, and the cabinet promises an "appropriate transition period" for the detailed requirements.

There are 18 public responses so far, including DHL and the logistics association TLN. We responded on 23 September as an age-verification provider, asking for technology-neutral requirements, no mandated storage of the date of birth, recognition of the European Digital Identity Wallet, and clarity on how the online check relates to the check at delivery.

What is required today

Today's rules sit in the Alcohol Act (Alcoholwet, called the Drank- en Horecawet until 2021) and the current Alcohol Decree.

• Article 20 Alcoholwet. You may not supply alcohol to anyone whose age of 18 has not been established, using an identity document, unless the person is unmistakably of age.
• Article 20a Alcoholwet. For distance sales you must use an age-verification system at the moment of purchase, and operate a documented procedure, the geborgde werkwijze, ensuring delivery only to the addressee's address or a pickup point and an age check at delivery. You may not contract with someone the system has found to be under 18.
• The current Alcohol Decree. Before the order is completed, the buyer answers an age question with an active step, such as ticking a box or entering a date of birth, and you state that age is also checked on delivery. The geborgde werkwijze must be reviewed at least yearly and be available for inspection.

So the checkbox is today's legal minimum at checkout, and the memorandum itself calls it "easy to circumvent". The real control today is at the door, which is exactly where the NVWA's test purchases keep failing.

What will likely change, and what is still open

Near-certain: self-declaration at checkout will not stay the norm; every alcohol parcel will carry a visible 18+ marking; couriers become fineable alongside you once the Alcohol Act is amended; and the age check at delivery stays mandatory, even with a better online system.

Still open:

• The exact technical requirements in the Alcoholregeling, and the transition period.
• The criteria for "recognised" private providers, who recognises them, and how that maps to the EU lists.
• Whether a presentation from the EU Digital Identity Wallet will count as sufficient.
• Whether the final decree text changes after the consultation and after it is laid before Parliament.

Why a privacy-first yes/no check is available today

You do not have to wait for the NL Wallet to replace the checkbox. With iDIN, your customer confirms their age through their own bank, with the same gesture as an iDEAL payment. Your shop gets back 18+ yes or no, and no date of birth, ID scan or selfie. That is the model the memorandum describes.

September showed why data minimisation matters. US-based IDScan.net, which runs ID checks for retailers among others, confirmed a breach after more than 153 million scanned driver's licences were offered for sale on the dark web. A date of birth or an ID scan you never stored cannot leak. (More in GDPR Compliance Made Easy.)

To be straight about it: no system is "approved" under the coming Alcoholregeling today, because its requirements do not exist yet. What you can do is move from self-declaration to a verified, auditable, data-minimal check. That meets today's obligation robustly and matches the direction both ministries have set out.

And the wallet? From the person identification data (PID) in an EUDI wallet, a verifier receives the date of birth and derives the yes/no itself; the PID has no "over 18" attribute. A yes/no with no date of birth at all comes from bank eID today, and from the EU proof-of-age attestation (eu.europa.ec.av.1) where available. We will add wallet verification once relying-party access certificates (WRPACs) can be obtained. Nobody can get one yet, and the earliest they could be issued is 24 December 2026. Your integration stays the same when that happens. More in Why We're Bringing in eID.

What to do now: a checklist for Dutch online alcohol sellers

1. Check your checkout. Is there an active age question before the contract is concluded, and do you state that age is checked on delivery? That is today's minimum.
2. Update your geborgde werkwijze. Is it current, have you done this year's internal review, and can you show it at once if the NVWA asks?
3. Agree terms with your carrier. ID check at the door, delivery only to the address or a pickup point. Prepare a visible 18+ marking for your boxes: not mandatory yet, but cheap.
4. Replace the checkbox with a verified check. Choose a method that returns only yes or no and leaves no date of birth or ID copy with you. For WooCommerce shops, see Implementing Age Verification in WooCommerce.
5. Respond before 31 October through the consultation form if you want a say in the details. It takes a few minutes, and you do not need a Dutch entity.
6. Watch the final decree text, the draft Alcoholregeling and its transition period, the recognition criteria for private providers (Dutch and EU), and the Alcohol Act amendment (36 884).

The bottom line

The Netherlands is not saying "wait for the wallet". It is saying: a public wallet route alongside recognised private providers, with privacy as a condition, and online alcohol rules built on a yes/no with no date of birth. The details come later. The direction is already clear.

eIDAS Pro provides privacy-first age verification for European merchants: an 18+ yes/no via iDIN, with no date of birth or ID scan reaching the seller, for WooCommerce, Shopify and any site through a JavaScript widget. EU Digital Identity Wallet verification follows once certification allows. Book a consultation →

This post reflects the position as of 20 October 2026 and is general information, not legal advice. The Alcohol Decree amendment is a draft in consultation; the 5 October letter is a statement of policy intent. Quotations from Dutch sources are our translations. Verify against the consultation and the parliamentary letter before relying on specifics.

Related Articles

Why We're Bringing in eID: The Bridge to Privacy-First Age Verification You Can Use Today

We built eIDAS Pro around the EU Digital Identity Wallet. So why are we adding bank-eID now? Because the mandates are landing in 2026, the wallets are not — and eID is the live, privacy-first bridge that carries you from today's rules to tomorrow's wallet.

9 min read

Implementing Age Verification in WooCommerce with eIDAS

Complete guide to adding eIDAS-based age verification to your WooCommerce store. Learn how to implement compliant, frictionless verification for alcohol, tobacco, and age-restricted products.

11 min read