Can civilians legally buy body armor? How to check federal and state law, read NIJ HG and RF ratings, verify NIJ certification, and evaluate plates, panels, helmets and shields.
Buying body armor involves two separate questions: whether the law allows the transaction, and whether the product does what its label says. This guide answers both. The legal answer, for most adults in most states, is yes. The product answer depends on reading NIJ ratings correctly and checking certification claims against NIJ’s own list.
1. Can civilians legally buy body armor?
Federal law prohibits purchase, ownership or possession only by persons convicted of a violent felony (18 U.S.C. § 931; three-year maximum). Four states add rules: New York (eligible professions and in-person delivery; enjoined by a federal court on October 21, 2026 and on appeal), Connecticut (in-person transfer to a holder of a Connecticut firearms credential), California (no purchase or possession by anyone prohibited from possessing a firearm under state law), and Louisiana (no wearing on school property or within 1,000 feet of a school). Details: Body Armor Laws by State.
2. Reading NIJ protection levels
NIJ Standard 0123.00 (2023) defines five levels. Handgun levels HG1 and HG2 replaced Level II and IIIA; rifle levels RF1, RF2 and RF3 replaced Level III and IV, with RF2 a new intermediate level.
Level | Typical construction | Test threats | Notes |
|---|---|---|---|
HG1 | Soft panel | 9mm FMJ RN 124 gr at 1,305 ft/s; .357 Magnum JSP 158 gr at 1,430 ft/s | Formerly Level II |
HG2 | Soft panel | 9mm FMJ RN 124 gr at 1,470 ft/s; .44 Magnum SJHP at 1,430 ft/s | Formerly Level IIIA; no rifle protection |
RF1 | Hard plate (standalone or in-conjunction) | 7.62x51 M80 149 gr at 2,780 ft/s; 7.62x39 mild steel core at 2,400 ft/s; 5.56 M193 56 gr at 3,250 ft/s | Formerly Level III; adds two threats Level III never required |
RF2 | Hard plate | All RF1 threats plus 5.56 M855 61.8 gr at 3,115 ft/s | New; formalizes the market’s “III+” |
RF3 | Hard plate | .30-06 M2 AP 165.7 gr at 2,880 ft/s | Formerly Level IV; RF1 threats are not part of the RF3 test; multi-hit optional |
A level describes defined test performance at defined velocities and shot patterns. It is not a promise about every cartridge of the same caliber. Two loads of the same nominal caliber can differ in bullet construction and velocity enough to change the result.

3. NIJ-certified versus NIJ-tested
NIJ-certified means the specific model, in the specific configuration, passed the NIJ Compliance Testing Program and appears on the NIJ Compliant Products List (CPL). Only torso-worn ballistic armor (and stab-resistant armor) is certified by NIJ.
NIJ-tested, NIJ-compliant, meets NIJ standard means a laboratory shot the product using NIJ methods and the manufacturer reports a pass. NIJ did not certify it. This is the only possible status for helmets, shields, backpack inserts and any product NIJ does not certify.
Verify a certification claim by looking up the manufacturer, model designation, standard version (0101.06 or 0101.07) and protection level on the CPL, and confirming the listing is current. A listing for one model, material or configuration does not cover another.
In-conjunction-with (ICW) plates achieve their rating only with the specified soft panel behind them. A standalone rating does not require a panel. Buy the configuration that was tested.
4. Helmets, shields and “NIJ Level IIIA” marketing
NIJ states that its Compliance Testing Program does not currently evaluate helmets or shields. A helmet advertised as “NIJ Level IIIA” was tested by a laboratory to the 1981 NIJ 0106.01 helmet protocol or the 1985 NIJ 0108.01 protective-materials protocol; it is not NIJ-certified, and no CPL entry exists for it. Current specifications for these products are ASTM E3368 (helmets) and ASTM E3347 with the E3141 test method (shields). Ask the seller for the test report: laboratory, standard, ammunition, velocities, shot locations and the exact product configuration tested.
5. Specifications that matter
Specification | Why it matters |
|---|---|
Protection level and standard version | Defines the threats the product was tested against and the test method (0101.06 vs 0101.07 differ in shot patterns and conditioning) |
Certification status | Separates an NIJ CPL listing from a manufacturer test claim |
Standalone or ICW | Determines whether a soft panel is required to reach the rating |
Coverage area and cut | Rating applies to the tested armor; nothing outside its footprint is protected |
Weight and thickness | Trade-offs against wearability and concealment; never read in isolation from the rating |
Multi-hit and edge-shot performance | Required at RF1/RF2; optional at RF3; check the test report |
Back-face deformation | Energy transferred to the wearer even when the round is stopped; the standard limits it |
Warranty, care and inspection instructions | Service life, cleaning, storage and inspection; damage or alteration can void the rating |
Manufacturing identification and lot marking | Traceability to the tested production |
6. The federal bills and what they would change
H.R.3398 and S.4553 (the Aaron Salter, Jr., Responsible Body Armor Possession Act) would make civilian purchase, ownership and possession of armor at or above RF1 performance, including helmets and shields, a federal felony, with exceptions for government, qualified and retired law enforcement officers, and armor lawfully possessed before enactment. Neither bill has moved past committee referral. Details: What Body Armor Would S.4553 Ban?
7. Pre-purchase checklist
Eligibility: federal § 931; your state’s rules (New York, Connecticut, California, Louisiana).
Threat: choose the level that matches the realistic threat; do not buy on words like “military-grade” or “bulletproof.”
Evidence: NIJ CPL listing for the exact model, or a full laboratory test report for products NIJ does not certify.
Configuration: standalone vs ICW; plate cut and size; carrier compatibility.
Documentation: warranty, care instructions, service life, lot markings.
Delivery: the retailer’s state shipping rules and any in-person requirement.
8. Frequently asked questions
Can a civilian buy a bulletproof vest?
Yes, under federal law, unless convicted of a violent felony. State rules apply in New York, Connecticut and California; Louisiana restricts wearing it near schools.
Is it legal to buy rifle plates?
Yes under federal law as of November 4, 2026. The federal bills that would change this have not advanced past committee.
Is NIJ certification legally required?
No federal rule requires it for civilian purchases. Agency procurements and grant programs often require CPL-listed armor.
Are ballistic helmets NIJ-certified?
No. NIJ does not evaluate helmets or shields for compliance. Helmets are tested by laboratories to NIJ 0106.01/0108.01 protocols or ASTM E3368.
Does a higher rating always mean better armor?
A higher rifle level addresses different threats, usually at more weight and thickness. RF3 is tested against armor-piercing .30-06 only; RF2 is tested against more common rifle threats including M855. Match the level to the threat.
Where do I check whether a model is NIJ-compliant?
The NIJ Compliant Products List maintained by NIJ’s Compliance Testing Program.
Sources
NIJ Standard 0123.00 (October 2023) and Addendum 1 (October 31, 2024): ojp.gov (PDF); Addendum 1 (PDF)
NIJ / OJP on helmets and shields not being evaluated by the Compliance Testing Program: ojp.gov
NIJ Compliant Products List (NIJ Compliance Testing Program, nij.ojp.gov)
ASTM E3141 and E3347 (shields): astm.org
18 U.S.C. § 931: law.cornell.edu
New York Department of State, Body Armor: dos.ny.gov/body-armor; Connecticut OLR 2023-R-0301; California AB 92; Louisiana R.S. 14:95.9 (links in Body Armor Laws by State)
Legal Disclaimer
General information, not legal advice or an individual equipment assessment.












