Tennessee ID scanning laws

Is it legal to scan IDs in Tennessee?

Yes. Tennessee does not specifically restrict scanning of a physical driver's license or ID card.

Tennessee's alcohol, tobacco and hemp rules do not create a general transaction-scan framework or restrict ordinary reading of the machine-readable data on a physical credential. For bars and retailers, that leaves electronic age verification available as part of the venue's own checking workflow.

Digital driver's licenses are different. Tennessee regulates information obtained from those credentials separately, including how long it may be retained and who it may be shared with.

Tennessee also has a criminal skimming law, but that provision is aimed at unauthorized reading done with intent to commit or assist a crime, not ordinary venue age verification.

Do you have to check IDs in Tennessee, and when?

Tennessee uses different age-checking rules depending on the product and whether alcohol is consumed on or off the premises.

Which IDs provide protection in Tennessee?

Tennessee's credential rules tell venues what satisfies the age-checking requirement rather than creating a separate scan-based defense.

For alcohol, the rule is relatively broad. A valid government-issued document may qualify if it includes the customer's photograph and date of birth, including a driver's license or another form of identification the retailer accepts.

Hemp uses a more specific standard based on a valid driver's license or other government-issued identification card that includes a photograph and establishes that the person is at least 21.

Tennessee's statutes also recognize certain secure identity-verification systems. Those provisions describe systems using a registered physical characteristic to confirm identity and are different from an ordinary barcode-based ID scan.

Can you keep data from an ID scan in Tennessee?

Yes. Tennessee gives venues broad flexibility over information obtained from a physical ID scan.

For physical driver's licenses and identification cards, Tennessee does not set a scan-specific maximum retention period, prescribe a list of fields that may be stored or impose a general purpose limitation on the resulting data.

Digital driver's licenses have a separate rule. Information obtained from a digital credential may be kept only as long as necessary to confirm its accuracy and for no more than three calendar days. Tennessee also restricts transferring that digital-credential information outside a limited group of authorized recipients.

The three-day limit therefore applies to information obtained from the digital credential system, not ordinary barcode data read from a physical card.

What other Tennessee laws reach the data you keep?

Tennessee's broader privacy law will not reach many ordinary venues, but its breach-notification rules can.

The Tennessee Information Protection Act applies only when a business meets both its revenue and data-processing thresholds, including annual revenue above $25 million. Many independent bars, restaurants and retailers will therefore fall outside its general scope.

Tennessee's breach-notification law is broader in that respect. A customer's name combined with a driver's license number can bring a security incident within the notification framework.

Tennessee does not currently have a separate general biometric privacy act. For businesses below the broader privacy act's thresholds, the state also does not impose a general ID-data deletion schedule comparable to some other states.

Does scanning give you a defense if you serve a minor in Tennessee?

Tennessee does not create a separate alcohol defense simply because a venue checked or scanned the customer's ID.

Unlike several other states, Tennessee's alcohol rules do not provide a general good-faith reliance defense tied to a successful ID check. Electronic verification can still help staff catch expired, inconsistent or suspicious credentials and maintain a consistent age-checking process, but the scan result is not itself a statutory defense.

Separate protections do exist in particular situations. For example, qualifying beer permit holders can benefit from Tennessee's responsible-vendor framework when the employee involved has the required certification. Tennessee's alcohol regulator may also have discretion in certain licensing matters involving sanctions, fines or retraining.

For venues using electronic verification, the value is therefore primarily in better age checking, consistency and documentation, rather than unlocking a separate statutory scan defense.

Can a customer refuse an ID scan in Tennessee?

Tennessee treats physical IDs and digital driver's licenses differently.

For a physical credential, Tennessee does not create a specific statutory right to refuse a scan or require a venue to offer a particular alternative.

A digital driver's license is expressly optional. Businesses may not require a customer to use the digital credential instead of a physical license, and they may not provide preferential service based specifically on the customer's use of the digital version.

Where identification itself is required, refusing to provide acceptable proof of age can still prevent the sale. That is especially relevant for off-premises alcohol sales subject to the carding requirement and for tobacco, vape and hemp transactions where proof of age is mandatory.