Ohio ID scanning laws

Is it legal to scan IDs in Ohio?

Yes. Ohio expressly allows ID scanning for alcohol purchases and admission to 21+ venues.

A liquor permit holder, employee or agent may use a transaction scan to check the validity of a driver's license or identification card. Ohio specifically allows that scan for two purposes: purchasing beer, intoxicating liquor or low-alcohol beverages, and gaining admission to a licensed on-premises venue restricted to people 21 and older.

That gives bars and clubs a clear statutory basis for using an ID scanner both at the register and at the door. The permission is purpose-specific, however, so the device should not be used for unrelated purposes under this provision.

Do you have to check IDs in Ohio, and when?

Ohio does not generally require a venue to use a scanner.

The law says a liquor permit holder may perform a transaction scan rather than making scanning mandatory.

Once a scan is performed, however, the result matters. If the electronic data does not match what is printed on the card, or the scan indicates that the printed information is false or fraudulent, the sale must be refused.

That means scanning creates useful additional information for staff, but it also means the venue should act on a failed or inconsistent result rather than ignoring it.

Which IDs provide protection in Ohio?

Ohio recognizes different credentials depending on which legal protection the venue is relying on.

For the scan-based defense, the credential must generally be a driver's license, commercial driver's license or identification card issued by Ohio or an equivalent credential issued by another state. Ohio also has a separate good-faith defense that does not require scanning.

That broader route can include:

Passports and military IDs therefore can support Ohio's broader good-faith defense even though they do not fit the ordinary transaction-scan workflow.

Ohio also offers a mobile ID. State guidance says acceptance is optional for the permit holder and that the credential should be machine-read rather than simply viewed on the phone.

Can you keep data from an ID scan in Ohio?

Yes. Ohio allows four specific fields from a transaction scan to be recorded and maintained.

Those fields are:

Other information carried in the barcode is outside the permitted list. That includes items such as the address and ZIP code, physical characteristics and other credential metadata.

Ohio does not currently set a fixed retention period for the four permitted fields. The more important restriction is how the information may be used: scan-derived information is tied to the purposes of Ohio's scan-defense framework rather than being available for unrestricted reuse.

What other Ohio laws reach the data you keep?

Ohio has a similar scanning framework for tobacco sales and other rules that can affect how venue data and policies are handled.

The tobacco provision closely mirrors the alcohol scanning rule. It uses the same four-field approach and similar limits on sharing and use, although it applies to tobacco transactions rather than admission to a 21+ venue.

Ohio does not currently have a comprehensive consumer privacy law or a general private-sector biometric privacy statute. The Ohio Data Protection Act instead offers businesses a potential legal defense when they maintain recognized cybersecurity practices.

Public-accommodation rules can also matter when a venue makes admission or service decisions, and some Ohio cities add their own local protections or scanning-related rules.

Does scanning give you a defense if you serve a minor in Ohio?

Yes. Ohio specifically provides a defense for venues that perform a valid transaction scan and rely on it reasonably.

The scan-based defense generally requires three things:

The scanner does not replace ordinary diligence. Staff should still compare the photo and description with the person presenting the ID and should not ignore circumstances that call the customer's age or identity into question.

Ohio also provides a separate good-faith defense that does not require a scanner and accepts a wider range of credentials, including passports and military IDs. The statute allows the two protections to operate alongside each other rather than forcing a venue to choose between them.

For an Ohio venue, scanning can therefore add a specific statutory layer of protection while remaining part of a broader ID-checking process.

Can a customer refuse an ID scan in Ohio?

Ohio does not require a customer to submit to a scan.

The scanning law does not make electronic verification compulsory for the customer or require a venue to use it for every transaction. A venue that accepts qualifying identification without scanning simply does not receive the scan-specific defense for that transaction.

Ohio's separate good-faith defense may still be available when staff carefully inspect and reasonably rely on an accepted credential. A venue may also establish its own ID-checking or admission policy, subject to applicable public-accommodation and other laws.