Indiana ID scanning laws

Is it legal to scan IDs in Indiana?

Yes. Indiana allows ID scanning and does not prescribe a specific method for checking a qualifying credential.

The alcohol and tobacco laws focus on whether the customer produced the required photo ID, not on whether staff read it visually or electronically.

For carryout alcohol and tobacco sales covered by the under-40 rule, scanning can therefore be part of a consistent workflow while the statutory duty remains the requirement to obtain qualifying photo identification.

Do you have to check IDs in Indiana, and when?

Yes for covered carryout alcohol and tobacco sales involving customers who are or reasonably appear to be under 40.

Which IDs provide protection in Indiana?

Indiana accepts any government-issued photo ID that shows the customer's date of birth, including a driver's license from any state.

The credential must show the customer's photograph and date of birth indicating an age of at least 21. Qualifying documents include:

Indiana law also provides for a mobile ID on a phone, but its carding rule and alcohol defense do not mention it.

Can you keep data from an ID scan in Indiana?

Yes. Indiana does not set a general scan-specific field list or retention period.

For venues below the thresholds of Indiana's consumer data protection law, ordinary retention is largely a matter of venue policy.

A record combining a customer's name with an unencrypted, unredacted driver's license or state ID number is personal information under Indiana's data-security law. That is true whether the number was scanned or typed manually.

What other Indiana laws reach the data you keep?

Stored license numbers bring Indiana's security, disposal and breach-notification rules into play.

Businesses holding a customer's name together with a driver's license or state ID number must use reasonable safeguards and render the information illegible or unusable before disposal. Qualifying breaches require notice without unreasonable delay and no later than 45 days after discovery.

The Indiana Consumer Data Protection Act generally applies at 100,000 residents, or at 25,000 where more than half of gross revenue comes from selling personal data. Public-accommodation law separately applies to venue admission and service decisions.

Does scanning give you a defense if you serve a minor in Indiana?

A scan record can help show that a qualifying ID was produced, while Indiana's defense also depends on what staff saw and believed.

For alcohol, one defense generally requires a qualifying photo ID or signed age statement, an appearance that would lead an ordinary prudent person to believe the customer was 21 or older and a sale made in good faith.

A separate defense focuses on reasonable precautions in hiring, training and supervising staff. Neither route depends on scanning, but a scan record can document the credential and timing of the check.

Tobacco and vape have their own parallel defenses.

Can a customer refuse an ID scan in Indiana?

Indiana does not create a specific right to refuse a scan or require a manual alternative.

Where the under-40 carding rule applies, a customer who will not produce qualifying photo ID cannot lawfully complete the covered sale. A venue may still decide whether the credential is checked electronically or through another lawful method.

Indiana also lets staff who have had alcohol server training keep an ID they reasonably believe is fake or belongs to someone else. The customer must be given a receipt showing the date and time, and within 24 hours the ID goes to the police with a written account of what happened. Staff who follow these steps are not liable for keeping the ID, but that protection does not cover using force to take it.