California ID scanning laws

Is it legal to scan IDs in California?

Yes, when the scan is used for a purpose California law permits.

California allows a business to scan or swipe certain driver's licenses and identification cards for specific purposes.

Those purposes include:

For bars, restaurants and other age-restricted businesses, age verification is the most relevant of these.

The important distinction is that California's permission is purpose-based. Scanning an ID does not create a general right to use the information for unrelated purposes.

Do you have to check IDs in California, and when?

It depends on what you sell, but California does not require scanning.

Which IDs provide protection in California?

California alcohol law recognizes a broad range of qualifying identification.

For alcohol sales, qualifying identification can include government-issued documents that contain the required identifying information and photograph, as well as US and foreign passports and US military identification.

The ID-scanning statute is written more narrowly and specifically refers to driver's licenses and identification cards issued by the California Department of Motor Vehicles.

That means the rules governing which IDs may support an alcohol age check and the rules governing scanning are not written the same way.

A venue should therefore distinguish between whether an ID can be accepted for age verification and whether a particular credential falls within the scanning provisions.

Can you keep data from an ID scan in California?

Yes, but the information must remain connected to a purpose California allows.

California's ID-scanning statute does not set a specific number of hours or days that scan data may be kept. Instead, the rule focuses on purpose.

Information obtained from a scan may only be used or retained in connection with one of the purposes permitted by the statute. That means a venue should not treat a permitted age-verification scan as general permission to keep or reuse the resulting information for unrelated purposes.

Other California laws create specific recordkeeping periods in particular situations, but those do not create a general retention period for ID scans.

What other California laws reach the data you keep?

Keeping ID information can also bring California privacy and data-security rules into play.

A driver's license number is treated as sensitive personal information under California privacy law. Separate California rules also require reasonable security for certain personal information and address the secure destruction of customer records that a business no longer intends to keep. A breach involving certain unencrypted identifying information can also create additional exposure.

So the question is not only whether the original scan is permitted. Venues also need to consider how any information they keep is protected and eventually deleted.

California does not have a general private-sector biometric consent law comparable to those found in some other states.

Does scanning give you a defense if you serve a minor in California?

No. Scanning an ID does not itself create the statutory protection.

For alcohol sales, California focuses on the identification presented and the steps taken by the licensee. The protection applies when a licensee requests identification, is shown a qualifying document and relies on it in good faith.

Since January 2026, California law also addresses situations where an electronic ID verification device fails to identify a false ID. The device result can be relevant, but only where the identification was also physically inspected, appeared valid and matched the person presenting it.

So a scanner can support the ID-checking process, but it does not replace the need to inspect the credential and the person presenting it.

Can a customer refuse an ID scan in California?

California does not specifically require venues to offer an alternative to scanning.

State law does not give customers a general right to demand a manual ID check instead of a scan, and it does not require venues to offer manual entry as an alternative. Digital driver's licenses are treated differently.

A person presenting a California mobile driver's license cannot be required to surrender possession of their phone, and businesses may not provide preferential service simply because someone chooses to use a digital credential.