Pennsylvania ID scanning laws

Is it legal to scan IDs in Pennsylvania?

Yes. Pennsylvania expressly provides for ID scanning and requires it for certain permit types.

The Liquor Code recognizes transaction scan devices and ties legal protection to their use.

For most licensees scanning is optional, but electronic age verification is required before the sale for:

Other bars, restaurants and alcohol retailers may still choose to scan even when their permit does not require it.

Do you have to check IDs in Pennsylvania, and when?

Only certain permits are required to check. For everyone else it is a choice.

Pennsylvania has no general rule making every licensee card every customer. What it has is a duty running the other way: where a licensee asks for identification, the customer has to produce it.

Pennsylvania also treats each alcohol purchase separately, so an ID check earlier in the visit does not automatically satisfy the requirement for a later one.

Which IDs provide protection in Pennsylvania?

Pennsylvania names the credentials that can support its age-verification protections.

The accepted list includes:

This is a specific statutory list rather than a general rule covering any document that appears to be government-issued. Some accepted credentials, including passports and military IDs, may not contain a barcode that a standard ID scanner can read, which matters most for the permits that are required to scan.

Can you keep data from an ID scan in Pennsylvania?

Yes. Pennsylvania does not set a specific retention period for scan data.

The Liquor Code does not specify how long scan-derived information may be kept or provide a general list of fields that may be stored. The main restriction is on sharing that information outside the venue.

Selling or otherwise providing information obtained from a transaction scan to a third party is prohibited, subject to limited exceptions.

Those exceptions are:

Customer consent is not listed as a separate exception to that restriction. Information that staff read from the visible face of an ID and enter manually is treated differently from information obtained through a transaction scan.

What other Pennsylvania laws reach the data you keep?

Pennsylvania's data-breach and public-accommodation rules can also matter.

A driver's license number can qualify as protected personal information under Pennsylvania's breach-notification law, so a security incident involving stored ID records can trigger notification obligations. Pennsylvania does not currently have a general private-sector biometric privacy law or a comprehensive consumer privacy law in force.

Separate public-accommodation rules also matter when a venue makes decisions about admission or service. For bars and restaurants they are particularly relevant to door policies, banned lists and other decisions about who is allowed in or served.

Does scanning give you a defense if you serve a minor in Pennsylvania?

Yes. Pennsylvania gives licensees broad protection when they use a transaction scan and rely on it in good faith.

The protection applies when:

The protection can apply in criminal cases, civil cases and proceedings involving the liquor license, and it is available to licensees that choose to scan voluntarily rather than only to the permit types required to use a scanner.

But the scan result is not enough by itself. Good faith still means looking at the card and at the person holding it, and Pennsylvania courts have turned the protection down where staff missed an expired credential, and where nobody compared the photo with the customer.

A scan from an earlier purchase should not simply be reused for a later round, and Pennsylvania retains other age-verification defenses that do not depend on scanning at all.

Can a customer refuse an ID scan in Pennsylvania?

Pennsylvania does not give customers a specific right to be served without a scan.

For permits where scanning is required, the seller cannot complete the covered sale without performing the required check.

For venues where scanning is optional, the Pennsylvania Liquor Control Board has said that a licensee may refuse service as long as the decision is not discriminatory, and that checking every customer's identification is permitted.

So a venue may choose a stricter ID-checking policy than the minimum required by statute, provided that policy is applied lawfully.