Compliance Guide
ID SCANNING LAWS
Understanding ID scanning regulations is essential for bars, nightclubs, dispensaries, and other age-restricted businesses. Laws vary by jurisdiction—from required scanning to significant restrictions.
Overview by Status
3
Required
TX, UT, NV (certain industries)
42
Permitted
Most states
6
Restricted
Permitted with data limits
0
Prohibited
NH only
Why Businesses Use ID Scanning
Age Verification
Instant, accurate verification reduces human error and ensures compliance with minimum age requirements.
Fraud Prevention
Advanced scanners detect altered or counterfeit IDs that might fool visual inspection.
Legal Protection
Documented verification provides evidence of due diligence if compliance questions arise.
Banned Patron Tracking
Identify individuals previously banned for misconduct or those on watch lists.
Operational Efficiency
Speed up entry lines while maintaining thorough verification standards.
Compliance Reporting
Cannabis dispensaries and other regulated industries require detailed transaction records.
Industries That Use ID Scanning
Bars & Nightclubs
Age verification for alcohol sales, capacity management, and banned patron tracking.
Liquor & Tobacco Retail
Age verification compliance for restricted product sales.
Cannabis Dispensaries
Mandatory verification in legal states, purchase limit tracking, and state reporting.
Casinos & Gaming
Age verification, self-exclusion list checks, and anti-money laundering compliance.
Restaurants & Breweries
Age verification for alcohol service at table and bar.
Event Venues
Access control, age verification for alcohol service, and capacity management.
United States: State-by-State
Showing 51 of 51 states
| State | Status | Summary |
|---|---|---|
| Alabama(AL) | Permitted | ID scanning for verification is permitted. Retention and use rules vary by industry context.Read full guide |
| Alaska(AK) | Permitted | Standard verification scanning is permitted. Check industry-specific regulators for additional requirements.Read full guide |
| Arizona(AZ) | Permitted | Scanning permitted for age and identity verification. Privacy obligations apply to data handling.Read full guide |
| Arkansas(AR) | Permitted | Verification scanning is allowed. Industry-specific rules may add additional limitations.Read full guide |
| California(CA) | Restricted | Scanning permitted and legally backed under SB 1371 / BPC §25660. Provides affirmative defense. CCPA applies to data handling — minimize retention.Read full guide |
| Colorado(CO) | Permitted | Verification scanning is allowed. Follow industry regulator guidance for specific requirements.Read full guide |
| Connecticut(CT) | Permitted | Scanning for verification is permitted. Data retention and use are subject to state rules.Read full guide |
| Delaware(DE) | Permitted | Verification practices depend on industry regulations. No blanket prohibition on scanning.Read full guide |
| Florida(FL) | Restricted | Scanning incentivized — ABT must consider scanner use as mitigating factor for penalties. Can be mandated for repeat offenders (SB 1748).Read full guide |
| Georgia(GA) | Permitted | Verify specific requirements with state and local regulators. Generally permitted for verification.Read full guide |
| Hawaii(HI) | Restricted | Verification permitted but data storage and use restrictions apply. Check industry rules.Read full guide |
| Idaho(ID) | Permitted | Verification scanning is allowed. Storage and use may be subject to limitations.Read full guide |
| Illinois(IL) | Permitted | Permitted for ID verification. Consumer privacy considerations (BIPA) may apply to biometric data.Read full guide |
| Indiana(IN) | Permitted | Standard verification scanning is allowed without significant restrictions.Read full guide |
| Iowa(IA) | Permitted | Verification scanning is allowed. Check regulators for data retention rules.Read full guide |
| Kansas(KS) | Permitted | Verification practices depend on industry. No blanket prohibition.Read full guide |
| Kentucky(KY) | Permitted | Verification scanning is allowed. Industry-specific rules may apply.Read full guide |
| Louisiana(LA) | Permitted | Verification scanning is allowed. Data storage and use are often restricted.Read full guide |
| Maine(ME) | Permitted | Verification scanning is permitted. Check local guidance for specifics.Read full guide |
| Maryland(MD) | Permitted | Scanning allowed for verification with limits on data use and retention.Read full guide |
| Massachusetts(MA) | Restricted | Verification permitted but privacy protections limit data retention and use.Read full guide |
| Michigan(MI) | Permitted | Verification scanning is allowed. Follow industry regulator rules.Read full guide |
| Minnesota(MN) | Permitted | Verification scanning is allowed. Retention and use may be regulated.Read full guide |
| Mississippi(MS) | Permitted | Verification scanning is allowed. Check industry guidance for specifics.Read full guide |
| Missouri(MO) | Permitted | Verification scanning is allowed. Follow state and local rules.Read full guide |
| Montana(MT) | Permitted | Verification scanning is allowed under state and local rules.Read full guide |
| Nebraska(NE) | Permitted | Verification scanning is allowed. Retention and use may be limited.Read full guide |
| Nevada(NV) | Permitted | No scanning mandate for standard alcohol sales — only visual ID check required. However, alcohol delivery requires ID scanning. Gaming and cannabis have separate, stricter requirements.Read full guide |
| New Hampshire(NH) | Restricted | Most ID scanning is explicitly prohibited under SAF-C 5606.06 — the only state with such a blanket restriction. However, verification-only scanning (no data storage) IS allowed for alcohol/tobacco age verification.Read full guide |
| New Jersey(NJ) | Permitted | Verification scanning is allowed. Check regulator guidance for retention rules.Read full guide |
| New Mexico(NM) | Permitted | Verification scanning is allowed. Industry rules may apply.Read full guide |
| New York(NY) | Restricted | Scanning permitted under ABC Law §65-b with affirmative defense. Strict data limits: can only retain name, DOB, ID number, expiry. Cannot store addresses or photos.Read full guide |
| North Carolina(NC) | Permitted | Verification scanning is permitted and strengthens the affirmative defense under N.C. Gen. Stat. § 18B-302(d). Underage sales carry Class 1 misdemeanor penalties and ABC permit suspension.Read full guide |
| North Dakota(ND) | Permitted | Verification scanning is allowed. Industry-specific restrictions possible.Read full guide |
| Ohio(OH) | Permitted | Verification scanning is allowed. Check local rules for retention requirements.Read full guide |
| Oklahoma(OK) | Permitted | Verification scanning is allowed. Industry regulators may impose limits.Read full guide |
| Oregon(OR) | Permitted | Verification scanning is permitted. Privacy and retention rules apply.Read full guide |
| Pennsylvania(PA) | Permitted | Verification scanning is allowed. Retention and use rules vary.Read full guide |
| Rhode Island(RI) | Permitted | Verification scanning is allowed. Check specific regulations.Read full guide |
| South Carolina(SC) | Permitted | Verification scanning is allowed. Industry rules may govern retention.Read full guide |
| South Dakota(SD) | Permitted | Verification scanning is allowed. Check regulators for specifics.Read full guide |
| Tennessee(TN) | Permitted | Verification scanning is allowed. Industry-specific policies may apply.Read full guide |
| Texas(TX) | Required | New legislation (SB 650) requires electronic ID scanning to verify age for retail alcohol sales.Read full guide |
| Utah(UT) | Required | Bars and taverns must electronically scan 100% of IDs (HB 437/HB 597). Restaurants scan under-35. Unique interdicted persons screening required.Read full guide |
| Vermont(VT) | Permitted | Verification scanning is allowed. Follow industry and regulator guidance.Read full guide |
| Virginia(VA) | Permitted | Verification scanning is allowed. Retention and use are subject to rules.Read full guide |
| Washington(WA) | Permitted | Scanning allowed for verification. Privacy and retention rules apply.Read full guide |
| West Virginia(WV) | Permitted | Verification scanning is allowed. Industry rules may apply.Read full guide |
| Wisconsin(WI) | Permitted | Verification scanning is allowed. Check regulators for retention requirements.Read full guide |
| Wyoming(WY) | Permitted | Verification scanning is permitted. Industry-specific guidance may apply.Read full guide |
| Washington D.C.(DC) | Required | New 100% ID law (Jan 2026) requires checking every customer for every alcohol purchase. ABCA conducts 11,000+ inspections annually. Affirmative defense available for high-quality fakes.Read full guide |
Canada: Provincial Regulations
Canadian privacy laws take a different approach than the U.S., emphasizing data minimization and consent. Visual inspection is generally preferred over electronic scanning, and businesses must justify why capturing data is necessary—not just convenient.
Consent Required
Must obtain meaningful consent before collecting personal information. Consent must be specific to the purpose.
Data Minimization
Only collect what is necessary. Visual inspection is often sufficient for age verification.
Retention Limits
Data must be destroyed once purpose is fulfilled. Documented retention policies are required.
| Province/Territory | Status | Summary |
|---|---|---|
| Federal (PIPEDA)(CAN) | Restricted | Visual inspection preferred. Data collection requires consent and must be justified as necessary, not just convenient. Strict data minimization and retention policies required. |
| British Columbia(BC) | Restricted | Under PIPA, visual inspection is acceptable and often sufficient. Recording or scanning IDs is discouraged unless business can justify necessity. Strong data minimization principles apply. |
| Alberta(AB) | Restricted | Similar to federal PIPEDA requirements. Provincial privacy commissioner provides specific guidance for licensed premises. Data minimization emphasized. |
| Quebec(QC) | Restricted | Strictest privacy regime in Canada, comparable to GDPR. Requires explicit consent for sensitive information. Additional requirements for biometric data. Significant penalties for violations. |
| Ontario(ON) | Permitted | Falls under federal PIPEDA. Scanning permitted with consent. Must follow data minimization principles and have documented retention policies. |
| Manitoba(MB) | Permitted | Governed by federal PIPEDA. Standard consent and data minimization requirements apply. |
| Saskatchewan(SK) | Permitted | Governed by federal PIPEDA. Standard consent and data minimization requirements apply. |
| Nova Scotia(NS) | Permitted | Governed by federal PIPEDA. Standard consent and data minimization requirements apply. |
| New Brunswick(NB) | Permitted | Governed by federal PIPEDA. Standard consent and data minimization requirements apply. |
| Newfoundland(NL) | Permitted | Governed by federal PIPEDA. Standard consent and data minimization requirements apply. |
| Prince Edward Island(PE) | Permitted | Governed by federal PIPEDA. Standard consent and data minimization requirements apply. |
If Your Venue Stores ID Data in Canada
Venues that choose to store scanned ID information must implement these practices:
- • Clear Signage: Display purpose of scanning, data retention period, and how to opt out (by not visiting).
- • Data Minimization: Extract only necessary data points rather than storing full ID images.
- • Automatic Deletion: Configure systems to delete data after set periods.
- • Security Safeguards: Implement appropriate protections and use contracts with third-party processors.
- • Quebec Special Note: Stricter consent standards apply. Significant penalties possible for non-compliance.
Can Customers Refuse ID Scanning?
In most states, customers can refuse to have their ID scanned. However, businesses also have the right to refuse service if scanning is required by their policy.
- • General rule: Private businesses can set ID scanning requirements as a condition of service.
- • Customer options: Refuse scanning and potentially be denied service, or find a business with different policies.
- • State variations: Some states require businesses to accept visual ID checks as an alternative; others allow businesses to insist on scanning.
- • Industry requirements: Cannabis dispensaries typically cannot offer alternatives due to regulatory requirements.
Important Considerations
- • Laws change frequently. Always verify current requirements with state regulators and legal counsel.
- • Industry-specific regulations (alcohol, cannabis, gaming) may impose additional requirements beyond general state law.
- • Local ordinances may add requirements not covered by state law.
- • Data privacy laws (like California's CCPA) affect what can be stored and for how long.
- • Always have a clear privacy policy explaining how ID data is handled.
Disclaimer: This information is provided for educational purposes only and should not be considered legal advice. Laws and regulations vary by jurisdiction and change over time. This guide provides general summaries and may not reflect the most current legal requirements. Always consult with legal counsel and check with state regulatory agencies for compliance guidance specific to your business and industry.
We Value Your Privacy
We use cookies to enhance your browsing experience and analyze site traffic. By clicking "Accept All", you consent to our use of cookies. Read our Privacy Policy for more information.
Questions?
(877) 835-4635