Skip to main content

State guide

Arkansas ID scanning laws

Arkansas allows venues to use ID scanning and leaves most age-checking workflows to the venue, with specific ID requirements for kegs, deliveries and medical marijuana.

For bars, restaurants, retailers and dispensaries, the practical questions are when identification must be checked, what electronic verification can document, how alcohol violations are treated and what happens to stored ID data afterwards.

Reviewed September 22, 2026 ยท 15 primary sources linked

Arkansas at a glance

Is it legal to scan IDs in Arkansas?
Yes.Arkansas does not specifically restrict ID scanning or the use of a barcode reader for age verification.
Do you have to check IDs in Arkansas, and when?
Only for certain transactions.Keg sales, alcohol deliveries and medical marijuana dispensing have specific ID requirements. Arkansas does not impose a general every-customer carding rule on ordinary bars and restaurants.
Which IDs provide protection in Arkansas?
For alcohol, Arkansas does not attach a statutory defense to a particular credential.Tobacco and vape rules do recognize qualifying government-issued proof of age.
Can you keep data from an ID scan in Arkansas?
Yes.Arkansas sets no general scan-specific field list or retention period. Once personal information is no longer being retained, it must be destroyed securely.
What other Arkansas laws reach the data you keep?
Arkansas's data-security law applies to stored ID numbers and certain biometric information.A breach can trigger notification duties, and the state does not currently have a comprehensive consumer privacy law.
Does scanning give you a defense if you serve a minor in Arkansas?
Not for alcohol, but a scan record can help show what staff knew.Arkansas treats a knowing sale to a minor more harshly than an unknowing one, so a record of what the ID showed at the time of the sale can matter. For tobacco and vape, reasonably relying on a qualifying ID can protect the retailer from administrative penalties.
Can a customer refuse an ID scan in Arkansas?
Arkansas does not specifically regulate refusal of a scan.The state does not require a manual alternative.

What Arkansas venues should know

Do you have to check IDs in Arkansas, and when?

Arkansas has specific ID duties for certain transactions rather than a general rule for every alcohol sale.

Bars, restaurants and package stores

Arkansas prohibits sales to people under 21 but does not impose a universal ID-checking requirement for ordinary on-premises or counter sales. A venue can therefore set its own checking policy, subject to the underage-sales rules.

Kegs and deliveries

Keg retailers must record an ID or driver's license number from the purchaser's documentation of age. Alcohol delivery recipients must present valid state-issued identification showing date of birth and sign for the delivery.

Tobacco and vape

The state prohibits sales to people under 21 and provides an administrative defense where the retailer reasonably relied on qualifying proof of age.

Medical marijuana

Dispensary agents verify the patient or caregiver's identity and registry card before dispensing, then enter the registry number into the state tracking system.

Which IDs provide protection in Arkansas?

Arkansas does not create an alcohol defense tied to a particular ID, but it does define qualifying proof of age for tobacco and vape.

For tobacco and vape, proof of age means valid government-issued documentation containing the customer's photograph, date of birth and expiration date.

Arkansas also offers a state digital driver's license and ID card. Businesses may accept the official digital credential, while a screenshot or ordinary photo of the card does not qualify as the state-issued digital version.

Can you keep data from an ID scan in Arkansas?

Yes. Arkansas does not set a general scan-specific field limit or retention period.

Venue policy can therefore determine how long ordinary scan records are kept, subject to any transaction-specific minimums. Keg records must be kept for 90 days after the keg is returned, and alcohol-delivery records must be kept for three years.

When a business decides that personal information is no longer to be retained, Arkansas requires reasonable steps to destroy or erase it so the information cannot be read.

What other Arkansas laws reach the data you keep?

Stored ID numbers can bring Arkansas's Personal Information Protection Act into play.

A person's name combined with an unencrypted or unredacted driver's license or Arkansas ID number is personal information under that law. Businesses holding it must use reasonable security, and a qualifying breach can require notice to affected residents and, for larger incidents, the Attorney General.

The same framework can cover biometric data such as a faceprint when it is stored with the person's name. Arkansas does not currently have a comprehensive consumer privacy law.

Does scanning give you a defense if you serve a minor in Arkansas?

A scan does not create an alcohol defense, but it can support the venue's record of what staff checked.

Arkansas treats alcohol sales to minors based in part on what the seller knew. An unknowing first offense is punished differently from a knowing sale, while permit discipline can still apply under the Alcoholic Beverage Control rules.

Tobacco and vape are different. There, reasonable reliance on qualifying proof of age can protect the retailer from administrative penalties. Electronic verification can help document the credential and the timing of the check, even though the statute does not make the scanner itself the defense.

Can a customer refuse an ID scan in Arkansas?

Arkansas does not create a specific right to refuse a scan and does not require a manual alternative.

How a venue handles a guest who does not want to be scanned is generally a matter of venue policy, subject to other applicable laws such as the state's civil rights protections.

For Arkansas's digital credential, presenting the mobile license does not authorize the business to search or access unrelated information on the customer's phone.

Alcohol, tobacco and medical marijuana

Bars and restaurants

Arkansas leaves the ordinary age-checking method to the venue.

A bar or restaurant can use electronic verification as part of its own policy even though the state does not require a scan or a universal carding workflow. The underage-sales rules still apply, and the seller's knowledge affects how the offense is treated.

Act 1035 of 2017 (Ark. Code 3-3-201)

Kegs and delivery

These transactions come with specific ID and recordkeeping requirements.

Keg-sale records include the purchaser's ID number and are kept for 90 days after return of the keg. Alcohol delivery records include the recipient's identifying information and are kept for three years.

3 CAR 3-408

Tobacco and vape

Qualifying proof of age can support a defense to administrative penalties.

The accepted proof is government-issued documentation showing the customer's photograph, date of birth and expiration date. The law focuses on reasonable reliance on the credential rather than on a particular scanning method.

Act 1071 of 2019 (Ark. Code 26-57-255)

Medical marijuana

Dispensaries verify identity and registry status before every sale.

The dispensary agent confirms the patient or caregiver and the registry card, then records the registry number in the state tracking system.

20 CAR 810-1501

What this means for your AgeShield setup

These are the AgeShield settings affected by the Arkansas rules above. How you configure them is ultimately a decision for your venue.

How long visits are kept
Arkansas sets no general scan-specific retention period. Keg and delivery records have their own minimums.AgeShield setting: Choose a retention period that matches your venue's purpose and any transaction-specific minimums.
Which ID fields are stored
Arkansas does not prescribe a general scan-field list. A name stored with a driver's license or ID number can fall under the state's data-security law.AgeShield setting: Keep the fields your venue actually needs and switch off unnecessary fields.
Consent screen
Arkansas does not generally require a consent screen for ID scanning.AgeShield setting: Enable consent if it is part of your venue's own policy or another applicable requirement.
Banned and watch lists
Arkansas does not have a scan-specific rule for venue lists, while public-accommodation law still applies to exclusion decisions.AgeShield setting: Use behavior-based reasons for list entries and choose whether lists are shared across venues.
Manual entry
Arkansas's proof-of-age rules focus on the document rather than on barcode reading.AgeShield setting: Enable manual entry as a fallback when an accepted credential cannot be scanned.

Common questions

Is it legal to scan IDs at a bar in Arkansas?

Yes. Arkansas does not specifically restrict ID scanning.

Do you have to check IDs in Arkansas, and when?

Arkansas does not impose a general every-customer ID-checking rule for ordinary alcohol sales. Keg sales, alcohol deliveries and medical marijuana dispensing have specific requirements.

Which IDs provide protection in Arkansas?

For alcohol, Arkansas does not attach a defense to a particular credential. For tobacco and vape, qualifying proof of age is valid government-issued documentation with a photograph, date of birth and expiration date.

How long can I keep ID scan data in Arkansas?

Arkansas does not set a general scan-specific maximum. When personal information is no longer being retained, it must be destroyed securely.

Does scanning give you a defense if you serve a minor in Arkansas?

Not for alcohol. A scan can help document what staff checked, while Arkansas's alcohol rules turn on other factors including the seller's knowledge.

Can a customer refuse an ID scan in Arkansas?

Arkansas does not specifically regulate refusal of a scan or require a manual alternative.

Does Arkansas accept a digital driver's license?

Arkansas issues an official digital driver's license and ID card that private businesses may accept. A screenshot or ordinary photo of the credential is not the official digital ID.

Does Arkansas have a consumer privacy law?

Arkansas does not currently have a comprehensive consumer privacy law. Its Personal Information Protection Act still imposes security, disposal and breach obligations for covered personal information.

Sources

This page is for informational purposes only and is not a substitute for professional legal advice. We research each rule and link its source, so you can check it against your own venue. Questions are welcome at support@ageshield.bar.

All state ID scanning guides

Still unsure how Arkansas applies to your venue?

Tell us what type of venue you run and we'll point you to the published rules we know of that may apply.