Iowa ID scanning laws

Is it legal to scan IDs in Iowa?

Yes. Iowa does not restrict ID scanning.

Iowa law does not require venues to scan an ID, and it does not restrict doing so. Its criminal offense for scanning devices is written for payment cards, not driver's licenses or state ID cards.

Do you have to check IDs in Iowa, and when?

The rule depends on the product and the type of sale.

Which IDs provide protection in Iowa?

Iowa's alcohol defense focuses on the quality of the inquiry rather than on a closed list of credentials.

The seller's defense asks whether the licensee made a reasonable inquiry into the customer's age. That gives venues flexibility to use visual inspection, electronic verification or both, provided the overall inquiry is reasonable.

Iowa does name specific credentials for certain transactions. Keg records use a driver's license, state ID or qualifying military ID number, and the false-ID retention rule covers driver's licenses and state ID cards. Iowa also offers an optional mobile ID that businesses are not required to accept.

Can you keep data from an ID scan in Iowa?

Yes. Iowa does not set a general scan-specific field list, maximum retention period or purpose restriction.

For ordinary scan records, the retention period is largely a matter of venue policy. Two alcohol workflows have specific minimums: keg-sale records must be kept for at least 90 days, and alcohol-delivery records must be kept for three years.

Those minimums apply to the required transaction records. They are not a general maximum for all ID scan data.

What other Iowa laws reach the data you keep?

A stored name and government-issued ID number can bring Iowa's breach-notification law into play.

If that data is exposed, the business may have to notify affected Iowa residents and, for larger incidents, the attorney general's consumer protection division.

The Iowa Consumer Data Protection Act generally applies at 100,000 consumers, or at 25,000 consumers when most of the business's revenue comes from selling personal data. Many independent venues will fall below those thresholds. The act is enforced by the attorney general and does not create a private right of action.

Does scanning give you a defense if you serve a minor in Iowa?

A scan record can help show the reasonable inquiry Iowa's alcohol defense requires.

If an underage customer misrepresents their age, a licensee can avoid guilt for the underage sale by showing that it made a reasonable inquiry to determine whether the customer was 21 or older. The statute does not require a particular credential or device.

Electronic verification can therefore be useful evidence of the steps staff took, but it is not automatically enough on its own. Iowa also has separate training-based protections that can reduce penalties in qualifying cases when the responsible employee holds an approved certificate.

Can a customer refuse an ID scan in Iowa?

Iowa does not create a specific right to refuse a scan and does not require a venue to provide a manual alternative.

A venue can decide how to handle a customer who declines electronic verification, subject to other applicable laws, including Iowa's public-accommodation rules.

Iowa also gives alcohol licensees and employees a process for retaining a suspected fake driver's license or state ID when there is a reasonable factual basis to believe it is altered, falsified or belongs to someone else. The credential must then be handled in the way the statute requires.