Arizona ID scanning laws

Is it legal to scan IDs in Arizona?

Yes. Arizona recognizes electronic ID checks and records.

Arizona's liquor law allows several ways to document an age check. One of them is a record created by a device that reads the customer's age from the credential.

The law also allows a liquor licensee to require identification as a condition of entry. Arizona therefore expressly contemplates ID verification both at the point of sale and at the door.

The more important restrictions come after the check: Arizona limits the purposes for which certain information from a driver's license or state-issued ID may be retained and used.

Do you have to check IDs in Arizona, and when?

Arizona does not require every customer to be scanned, but it does require a specific age-checking process when there is reason to question the customer's age.

When that happens, the person checking the ID must:

The photo comparison is an important part of the process. Reading the barcode alone does not replace looking at the customer and the credential.

There is also a narrower rule for certain off-sale transactions: when a customer who appears under 27 buys alcohol without leaving their vehicle, identification must be required.

Which IDs provide protection in Arizona?

Arizona uses a specific list of accepted identification.

The list includes:

Arizona treats this as the list of acceptable written credentials for the alcohol age-checking protections. One detail is easy to miss: an Arizona license issued in the under-21 format stops qualifying as acceptable identification 30 days after the holder turns 21, even if the license itself has not yet expired.

Can you keep data from an ID scan in Arizona?

Yes, but Arizona limits what the information may be used for.

Arizona does not set a general retention period for ID-scan data and does not provide a specific list of fields that may be stored. Its liquor law also recognizes several forms of records, including a photocopy, photograph or digital copy of the credential.

A separate retail-information law limits how information from a driver's license or state-issued ID may be retained and used.

The permitted purposes are:

The same law also restricts sending that information to third parties, apart from specific exceptions. Marketing and general analytics are not among the listed purposes.

What other Arizona laws reach the data you keep?

Arizona's breach-notification rules can apply when certain ID information is stored.

A person's name combined with a driver's license or nonoperating ID number can fall within Arizona's breach-notification law when the information is unencrypted and unredacted.

Arizona also has a record-disposal law covering certain records that contain a person's name together with a license number. That provision is written specifically around paper records and documents.

Arizona does not currently have a comprehensive consumer privacy law or a general private-sector biometric privacy law.

Does scanning give you a defense if you serve a minor in Arizona?

The strongest protection comes from completing the required check and keeping a record of it, not from the scanner itself.

When a licensee or employee follows Arizona's age-checking steps and keeps a record of the identification for that visit, the statute provides strong protection against the relevant underage-sale and entry violations.

The record does not have to come from a scanner. Arizona recognizes several ways to document the check, including a handwritten record.

If the required steps were followed but no record was kept, an affirmative defense may still be available. However, keeping no record puts the venue in a weaker position because Arizona law also creates presumptions against a venue that cannot produce one.

For practical purposes, the important distinction is therefore not scan versus no scan. It is documented check versus undocumented check.

Can a customer refuse an ID scan in Arizona?

Arizona does not specifically create a right to refuse an ID scan.

The liquor law allows a licensee to require identification as a condition of entry, but it does not separately require venues to offer a particular alternative to scanning.

For venues, the important point is that refusing a scan is different from refusing to provide identification at all. If an age check is required, the venue still needs to complete the applicable verification process and decide how it will document that check.