Skip to main content

State guide

New Jersey ID scanning laws

New Jersey expressly allows ID scanning to verify age. What it regulates is what happens to the data afterwards, not whether you check.

For bars, restaurants, dispensaries and retailers, the key questions are what you may scan for, what the scan may read, how to set retention correctly, and how the rules differ for cannabis businesses.

Reviewed September 29, 2026 ยท 6 primary sources linked

New Jersey at a glance

Is it legal to scan IDs in New Jersey?
Yes, for specific purposes.New Jersey allows ID scanning for purposes that include verifying age and checking whether an ID is genuine.
Do you have to check IDs in New Jersey, and when?
New Jersey does not require scanning.Its age-verification rules generally focus on examining the credential itself. Cannabis retailers also have specific recordkeeping requirements.
Which IDs provide protection in New Jersey?
New Jersey names qualifying physical photo IDs.For alcohol, these include driver's licenses, state photo IDs and similar government-issued photo credentials.
Can you keep data from an ID scan in New Jersey?
Not when the scan is used for age verification or to check whether the ID is genuine.New Jersey allows certain fields to be read, but prohibits retaining the information collected from those scans.
What other New Jersey laws reach the data you keep?
New Jersey privacy, data-security and breach-notification rules can still apply.Those rules can also reach information entered manually rather than scanned.
Does scanning give you a defense if you serve a minor in New Jersey?
No, but a scan record can help show the ID the customer presented.The alcohol defense depends on the credential presented, the customer's appearance and the seller's good-faith reliance, not on using a scanner.
Can a customer refuse an ID scan in New Jersey?
New Jersey does not specifically address this.A venue's ability to refuse service is still subject to other laws, including New Jersey's protections against discrimination.

What New Jersey venues should know

Do you have to check IDs in New Jersey, and when?

New Jersey does not require ID scanning.

The alcohol, tobacco and cannabis rules do not generally require businesses to use a scanner. Instead, the relevant age-verification rules focus on examining identification.

Alcohol

New Jersey's alcohol rules are built around the credential presented and the seller's good-faith reliance on it. Scanning is not itself required.

Cannabis

Cannabis retailers must examine identification, confirm that the customer is legally old enough to purchase and keep a record showing that the age check took place.

Tobacco and vape

The rules similarly focus on checking qualifying identification rather than requiring a scan.

Which IDs provide protection in New Jersey?

New Jersey's alcohol defense is based on qualifying government-issued photo identification.

For alcohol sales, the statute recognizes credentials such as a photo driver's license, a state-issued photo ID and similar photographic identification issued by another state or the federal government.

The rules for tobacco and vape products use their own identification requirements, which are similar but not identical. New Jersey does not currently have a generally available state mobile ID; legislation creating one is scheduled to take effect later.

Can you keep data from an ID scan in New Jersey?

Not when the scan is used to verify age or check whether the credential is genuine.

New Jersey separates what may be read from what may be retained.

What may be read

A scan may collect up to five pieces of information:

  • Name
  • Address
  • Date of birth
  • State that issued the card
  • Card number

What may be kept

For a scan used to verify age or determine whether the ID is genuine, the information collected from the scan may not be retained. New Jersey therefore does not set a retention period for those scans, because the rule prohibits keeping the information in the first place, and customer consent does not create a separate exception.

The scanning rule applies specifically to information collected electronically from the credential. Information a staff member reads from the visible face of the card and enters manually is treated differently under this particular statute, although other privacy and data-security rules can still apply. Cannabis businesses also have separate requirements, and those restrictions are not avoided simply by typing information instead of scanning it.

What other New Jersey laws reach the data you keep?

New Jersey's broader privacy and data-security rules can apply to customer records regardless of how the information was collected.

The New Jersey Data Privacy Act applies to businesses that meet its data-processing thresholds. Separate state law also addresses protecting personal information, securely destroying records that are no longer needed and responding to qualifying data breaches.

These rules can apply to information entered manually as well as information collected electronically. New Jersey does not have a separate biometric privacy law comparable to Illinois BIPA, but under its broader privacy rules an ordinary photograph is treated differently from biometric information created to identify a person, such as certain facial-recognition templates.

Does scanning give you a defense if you serve a minor in New Jersey?

No. New Jersey's alcohol defense does not depend on using a scanner.

The defense focuses on three things:

  • The customer falsely represented their age in writing or presented qualifying photo identification
  • The customer's appearance was such that a reasonable person would believe they were 21 or older
  • The seller acted in good faith in relying on both

A scan can support an ID check, but the scanner itself does not create the defense. The customer's appearance also matters, so a scan cannot replace comparing the ID with the person presenting it.

The statutory defense applies to the criminal charge. New Jersey does not provide the same defense in a proceeding involving the alcohol license.

Can a customer refuse an ID scan in New Jersey?

New Jersey does not specifically create a right to refuse an ID scan.

The ID-scanning statute does not require a venue to offer a manual alternative, and it does not require a venue to serve someone who declines a scan. Separate laws still govern when a business may refuse service, including New Jersey's public-accommodation law, which prohibits discrimination based on protected characteristics.

A venue may therefore set its own ID-checking policy, but that policy still needs to be applied lawfully and consistently.

Alcohol, cannabis and your records

Alcohol

You may scan for age verification, but you may not retain the information collected from that scan.

Scanning is permitted for checking age or confirming that an ID is genuine. The alcohol defense itself does not depend on scanning; it is based on the credential, the customer's appearance and the seller's good-faith reliance.

N.J.S.A. 56:11-54

Cannabis

Cannabis retailers have separate ID-checking and recordkeeping requirements.

A dispensary must inspect the customer's identification, confirm that the customer is legally old enough and keep a record that the check occurred. Those rules apply separately from New Jersey's general retail ID-scanning statute, and using manual entry instead of a scan does not remove the cannabis-specific restrictions on customer information.

N.J.A.C. 17:30-14.3

Your records

How the information was collected matters under the scanning law, but other privacy rules can still apply.

Information read from the visible face of an ID and entered manually is outside the specific retention restriction that applies to scanned information. That does not make manually entered records unregulated: New Jersey's privacy, data-security, record-destruction and breach-notification rules can still apply.

N.J.S.A. 56:8-162

What this means for your AgeShield setup

These are the AgeShield settings affected by the New Jersey rules above. How you configure them is ultimately a decision for your venue.

How long visits are kept
New Jersey prohibits retaining information obtained from a scan used for age verification or to check whether an ID is genuine.AgeShield setting: Choose how long visits are kept, down to 0. Which ID fields are stored with them is a separate setting.
Which ID fields are stored
New Jersey allows a scan to collect up to five items: name, address, date of birth, issuing state and card number.AgeShield setting: Configure the scan to collect no more information than the New Jersey rule allows, and do not retain those scan-derived fields where the retention prohibition applies.
Manual entry
Information staff read from the visible face of an ID and enter manually is treated differently under the general scanning statute.AgeShield setting: Enable manual entry if your venue needs a workflow that does not retain information collected electronically from the scan. Cannabis businesses should review their separate requirements.
Banned and watch lists
A banned or watch-list entry created directly from scan-derived information would require keeping information obtained from the scan.AgeShield setting: Review any list, repeat-visitor or recognition feature that relies on scan-derived information before enabling it in New Jersey.
Consent
Customer consent does not create an exception allowing a venue to retain information from an age-verification or authenticity scan.AgeShield setting: Do not rely on a consent screen to override the New Jersey retention restriction. Configure collection and retention accordingly.

Common questions

Is it legal to scan IDs at a bar in New Jersey?

Yes. New Jersey allows ID scanning for specific purposes, including verifying age and checking whether the credential is genuine.

Do you have to check IDs in New Jersey, and when?

New Jersey does not generally require scanning. Its age-verification rules focus on examining qualifying identification, while cannabis retailers have additional recordkeeping requirements.

Which IDs provide protection in New Jersey?

For alcohol, New Jersey recognizes qualifying government-issued photo credentials such as driver's licenses, state photo IDs and similar identification issued by other states or the federal government.

Can I store what the scan returns in New Jersey?

Not when the scan is used for age verification or to confirm that the credential is genuine. New Jersey allows certain information to be read but prohibits retaining the information collected from those scans.

Does consent allow me to keep scan data?

No. The statute does not provide a consent exception for retaining information collected through an age-verification or authenticity scan.

Does typing the details by hand make a difference?

For the general retail scanning rule, yes. Information read from the visible face of the ID and entered manually is treated differently from scanned information, although other privacy and data-security requirements can still apply and cannabis has separate rules.

Does scanning give you a defense if you serve a minor in New Jersey?

No. The alcohol defense depends on the identification presented, the customer's appearance and the seller's good-faith reliance rather than the use of a scanner.

Can a customer refuse an ID scan in New Jersey?

New Jersey does not specifically address refusal of an ID scan. A venue may set its own policy, subject to other applicable laws including protections against discrimination.

What happens if a business violates the scanning law?

The statute provides civil penalties of $2,500 for a first violation and $5,000 for later violations, and also allows an affected person to bring a private claim.

Sources

This page is for informational purposes only and is not a substitute for professional legal advice. We research each rule and link its source, so you can check it against your own venue. Questions are welcome at support@ageshield.bar.

All state ID scanning guides

Still unsure how New Jersey applies to your venue?

Tell us what type of venue you run and we'll point you to the published rules we know of that may apply.