State guide
Utah ID scanning laws
Utah requires electronic age verification for certain alcohol customers and requires the resulting record to be kept for seven calendar days.
For bars, taverns and restaurants, the key questions are who must be checked, when the check happens, how the ID must be verified and which information has to be retained afterwards.
Reviewed October 20, 2026 · 10 primary sources linked
Utah at a glance
- Is it legal to scan IDs in Utah?
- Yes.Utah requires electronic age verification in situations covered by the rule and recognizes specific technologies for completing the check.
- Do you have to check IDs in Utah, and when?
- Yes. Bars and taverns check everyone they admit.Restaurants verify age before a customer who appears 35 or younger obtains an alcoholic drink. Beer retailers verify at drive-through and curbside pickup.
- Which IDs provide protection in Utah?
- A valid driver's license or passport, a state ID card or a military ID card.A foreign driver's license and a state-endorsed digital identity also count. A driving privilege card does not.
- Can you keep data from an ID scan in Utah?
- Yes, and Utah specifies how long.The record must be kept for seven calendar days and may not be kept longer.
- What other Utah laws reach the data you keep?
- A privacy law for larger businesses, and a personal information law with no size threshold.The privacy law applies only to businesses with $25,000,000 or more in annual revenue that also meet a data threshold. The personal information law requires reasonable safeguards for, and proper destruction of, records that pair a name with a driver's license or state ID number.
- Does scanning give you a defense if you serve a minor in Utah?
- No, but a scan record can help show that staff checked the customer's age.Serving a minor is an offense when staff negligently or recklessly fail to determine whether the customer is a minor. The defense Utah's alcohol law recognizes is a signed statement of age, not a scan.
- Can a customer refuse an ID scan in Utah?
- Not where the electronic check is required.In those situations, electronic verification is the method Utah requires.
AgeShield ID Scanner
The ID scanner app for bars and clubs
Scan IDs on the phones your staff already carry, with fake ID checks and a record of every scan.
What Utah venues should know
Is it legal to scan IDs in Utah?
Yes. In covered situations, Utah requires age to be verified electronically.
Utah requires certain alcohol licensees to electronically verify proof of age.
The rule accepts a device that contains any of these:
- A magnetic stripe card reader
- A two-dimensional barcode reader
- Technology that checks a state-issued ID card's validity from the barcode on the back
For venues covered by the requirement, electronic verification is therefore part of the required age-checking process rather than an optional extra. The device must be able to verify a physical driver's license, state ID card and military ID card, and it may display no more than the name, age, ID number, date of birth, gender and the status and expiration date of the ID.
The exact wording
An electronic age verification device or program described in Subsection (3) must contain a technology that: (a) verifies the validity of a physical: (i) state issued driver's license; (ii) state issued identification card; and (iii) military identification card; and (b) visually displays no more than the following for the individual who presents a physical proof of age for verification: (i) the name; (ii) the age; (iii) the number assigned to the individual's proof of age by the issuing authority; (iv) the birth date; (v) the gender; and (vi) the status and expiration date of the individual's proof of age.
An electronic age verification device or program meets the requirement of Subsection (4) if the electronic age verification device or program contains: (a) a technology that can determine the validity of a state issued identification card from the barcode located on the back of the state issued identification card by: (i) comparing the card's barcode to other legitimate barcodes; or (ii) identifying patterns within legitimate state issued identification cards; (b) a magnetic stripe card reader; or (c) a two-dimensional (2d) stack symbology card reader.
Do you have to check IDs in Utah, and when?
Yes. Bars and taverns verify everyone they admit, and restaurants verify customers who appear 35 or younger.
When the check happens depends on the type of license.
Bars and taverns
Age is verified before an individual is admitted, and the statute sets no apparent-age threshold for bars and taverns. For a typical bar or tavern, that makes the electronic check part of the door process.
Restaurants
Full-service, limited-service and beer-only restaurants verify age before a customer who appears 35 or younger obtains an alcoholic product. The check therefore happens before the alcohol is served rather than automatically at the entrance.
Beer retailers
A store licensed to sell beer for off-premises use verifies age before a sale at a drive-through window, a drive-up loading area or a designated pickup parking stall. The electronic check is tied to those pickup sales.
The exact wording
(a) An authorized person is required to verify proof of age under this section before an individual who appears to be 35 years old or younger procures an alcoholic product on the premises of a full-service restaurant licensee, a limited-service restaurant licensee, or a beer-only restaurant licensee. (b) An authorized person is required to verify proof of age under this section before an individual: (i) gains admittance to the premises of a bar licensee or tavern; or (ii) purchases beer from an off-premise beer retailer as described in Subsection 32B-7-202(8).
Utah Code 32B-1-407(3)Utah Code 32B-7-202(8)Utah Admin. Code R82-4-101
Which IDs provide protection in Utah?
Utah's alcohol law lists the IDs that count as proof of age, and a driving privilege card is not one of them.
Staff may accept proof of age as evidence that a customer is of legal age.
Utah's alcohol law names seven kinds of proof of age:
- A Utah ID card
- An ID card from another state that is substantially similar to a Utah ID card, with a date of birth and photo
- A valid driver's license with a date of birth and photo, issued under the law of the state that issued it or by the US Department of State
- A military ID card with a date of birth and photo
- A valid passport
- A valid driver's license from another country, with a date of birth and photo
- A state-endorsed digital identity issued under Utah law
A driving privilege card is excluded and may not be accepted as evidence of age. If the scanning device cannot verify an ID, Utah provides an alternative procedure that the venue must follow: staff document the ID's type, number and expiration date and the customer's name and date of birth, or use another technology that can read the ID and retain its number, expiration date, name and date of birth.
The exact wording
An authorized person may not accept a driving privilege card issued in accordance with Section 53-3-207 as evidence of the legal age of an individual.
If the electronic age verification device or program described in Subsection (4) cannot verify an individual's proof of age, the applicable licensee shall: (a) document: (i) the type of proof of age; (ii) the number assigned to the proof of age; (iii) the expiration date of the proof of age; (iv) the individual's name; and (v) the individual's birth date; or (b) use an alternate technology capable of reading the proof of age and retaining the information described in Subsections (6)(a)(ii) through (v).
Utah Code 32B-1-102(100)Utah Code 32B-1-406Utah Admin. Code R82-4-101(6)
Can you keep data from an ID scan in Utah?
Yes. Utah requires the verification record to be kept for seven calendar days and no longer.
Utah is unusual because it sets the retention period in both directions. The record is the information obtained from the ID, together with the time and date it was verified or presented.
Where the device cannot verify the ID, the rule lists what is documented:
- Type of proof of age
- Number assigned to the proof of age
- Expiration date
- Name
- Date of birth
That information must be kept for seven calendar days, and the rule prohibits keeping it for more than seven calendar days. It may be used only to verify age.
So for venues covered by the rule, seven days is not simply a maximum retention option. It is the required retention window.
The exact wording
An applicable licensee shall retain, for a period of seven calendar days: (i) the information obtained from an individual's proof of age under Subsection (4) or (6); and (ii) the time and date the proof of age was verified under Subsection (4) or presented under Subsection (6).
An applicable licensee may not retain the information described in Subsection (7)(a) for more than seven calendar days.
An applicable licensee may not use or retain the information collected under Subsection (4) or (6) for a purpose other than to verify an individual's proof of age.
What other Utah laws reach the data you keep?
Utah's consumer privacy law applies only above set revenue and data thresholds, and a separate law protects records that pair a name with a driver's license or state ID number.
The Utah Consumer Privacy Act has applied since December 31, 2023, but not to every bar, restaurant or retailer. It reaches a business in Utah with annual revenue of $25,000,000 or more that, in a calendar year, controls or processes the personal data of 100,000 or more consumers, or of 25,000 or more consumers while deriving over 50% of its gross revenue from selling personal data.
Utah's Protection of Personal Information Act has no such threshold. A business that keeps a person's name with their driver's license or state ID number, unless both are encrypted or otherwise made unreadable or unusable, must maintain reasonable procedures to prevent unlawful use or disclosure of that information. It must also destroy records it is not to retain by shredding, erasing or otherwise making the information indecipherable.
The exact wording
This chapter applies to any controller or processor who: (a) (i) conducts business in the state; or (ii) produces a product or service that is targeted to consumers who are residents of the state; (b) has annual revenue of $25,000,000 or more; and (c) satisfies one or more of the following thresholds: (i) during a calendar year, controls or processes personal data of 100,000 or more consumers; or (ii) derives over 50% of the entity's gross revenue from the sale of personal data and controls or processes personal data of 25,000 or more consumers.
Any person who conducts business in the state and maintains personal information shall implement and maintain reasonable procedures to: (a) prevent unlawful use or disclosure of personal information collected or maintained in the regular course of business; and (b) destroy, or arrange for the destruction of, records containing personal information that are not to be retained by the person.
Does scanning give you a defense if you serve a minor in Utah?
No. The electronic check is a required step, and Utah's alcohol law ties no defense to it.
Selling or serving alcohol to a minor is an offense when the person negligently or recklessly fails to determine whether the customer is a minor, and a more serious one when the person knows. Completing the required scan does not by itself create a defense to that offense.
Utah's alcohol law recognizes a signed statement of age as a defense: a statement that is properly completed, signed and filed can be offered as a defense in a case over selling or serving alcohol to the person who signed it. Separately, a person charged with violating the proof-of-age rules, which include the electronic check, is not penalized if it is proved that they acted in good faith.
The exact wording
Except as provided in Subsection (3), a person is guilty of a class B misdemeanor if the person who violates Subsection (1) negligently or recklessly fails to determine whether the recipient of the alcoholic product is a minor.
A statement of age, if properly completed, signed, and filed in accordance with Section 32B-1-405, may be offered as a defense in a case when there is at issue the legality of: (a) selling, offering for sale, or furnishing an alcoholic product to the individual who signed the statement of age; (b) admitting the individual who signed the statement of age into a restricted area; or (c) allowing the individual who signed the statement of age to be employed in employment that under this title may not be obtained by a minor.
A person is not subject to a penalty for a violation of this part if it is proved to the commission or the court hearing the matter that the person charged with the violation acted in good faith.
Utah Code 32B-4-403Utah Code 32B-1-406(2)Utah Code 32B-1-408(2)
Can a customer refuse an ID scan in Utah?
Not where electronic verification is required.
For customers who fall within Utah's age-verification rule, the electronic check is part of the prescribed process. The law does not create a right for the customer to replace that required electronic verification with a simple visual inspection. If the ID cannot be electronically verified, the venue must follow the alternative process provided by the state.
Bars, taverns, restaurants and your records
Bars and taverns
Verify age when the customer enters.
Bars and taverns complete the electronic age check before an individual is admitted, with no apparent-age threshold. That makes Utah's rule directly relevant to the door workflow.
Utah Code 32B-1-407(3)Restaurants
Verify age before alcohol is served.
Full-service, limited-service and beer-only restaurants perform the check before a customer who appears 35 or younger obtains an alcoholic product. The requirement therefore follows the alcohol transaction rather than ordinary admission to the venue.
Utah Code 32B-1-407(3)Your records
Keep the required record for seven calendar days, then delete it.
Utah requires the information obtained from the ID, and the time and date of the check, to be kept for seven calendar days. The rule also prohibits keeping it for more than seven calendar days, so the period is fixed in both directions.
Utah Admin. Code R82-4-101(7)What this means for your AgeShield setup
These are the settings in AgeShield ID Scanner, the ID scanner app for bars and clubs, that the Utah rules above affect. How you configure them is ultimately a decision for your venue. See every privacy setting.
- How long visits are kept
- Utah requires the age-verification record to be kept for seven calendar days and prohibits keeping it longer.AgeShield setting: Set the retention period to seven calendar days for records covered by the Utah rule.See the retention setting
- Which ID fields are stored
- Utah requires the information obtained from the ID and the time and date of the check to be kept. Where the device cannot verify the ID, the rule lists five items to document: proof-of-age type, number, expiration date, name and date of birth.AgeShield setting: Configure the stored ID fields so the required Utah record contains the information the rule calls for.See what each field can do
- Manual entry
- If a credential cannot be verified electronically, Utah provides an alternative process.AgeShield setting: Enable manual entry so staff have a documented fallback when the credential cannot be electronically verified.See how Manual Entry works
- Door workflow
- Bars and taverns perform the check at admission, while restaurants complete it before alcohol is served.AgeShield setting: Configure the scanning workflow around where the verification is required in your venue: at the door for bars and taverns, or before alcohol service for restaurants.See how a scan works
- Banned lists and automatic flags
- Utah's rule bars using or retaining information collected in the required age check for any purpose other than verifying age.AgeShield setting: With the strictest guest-record setting, banned alerts stop firing at the door, bans can no longer be added from a scan and the Ban List becomes a manual lookup.How Banned lists work at the door
Common questions
Is it legal to scan IDs at a bar in Utah?
Yes. In covered situations, Utah requires electronic age verification and recognizes specific electronic methods for performing it.
Do you have to check IDs in Utah?
Yes. Bars and taverns check every individual they admit, while restaurants check a customer who appears 35 or younger before the customer obtains alcohol.
Which IDs provide protection in Utah?
A Utah ID card, a substantially similar ID card from another state, a valid driver's license, a military ID card, a valid passport, a valid driver's license from another country or a state-endorsed digital identity. A driving privilege card is not accepted. If the scanning device cannot verify the ID, the venue follows the state's alternative procedure.
How long can I keep ID scan data in Utah?
For records covered by the alcohol age-verification rule, seven calendar days. The rule requires the information to be kept for that period and prohibits keeping it longer.
What information has to be kept?
The information obtained from the ID and the time and date of the check. Where the device cannot verify the ID, the rule lists the type of proof of age, its number, its expiration date and the individual's name and birth date.
Does scanning give you a defense if you serve a minor in Utah?
No. The electronic check is a required step, not a defense. Utah's alcohol law recognizes a properly completed, signed and filed statement of age as a defense in a case over selling or serving alcohol to the person who signed it.
Can a customer refuse an ID scan in Utah?
Not where electronic verification is required. If the ID cannot be electronically verified, the venue must use the alternative process provided by the state.
Sources
- Utah Code 32B-1-407
- Utah Admin. Code R82-4-101
- Utah Code 32B-7-202(8)
- Utah Code 32B-1-102(100)
- Utah Code 32B-1-406
- Utah Code 13-61-102
- Utah Code 13-44-102
- Utah Code 13-44-201
- Utah Code 32B-4-403
- Utah Code 32B-1-408(2)
This page is for informational purposes only and is not a substitute for professional legal advice. We research each rule and link its source, so you can check it against your own venue. Questions are welcome at support@ageshield.bar.
ID scanning laws in nearby states
Rules change across state lines. Compare the ID-scanning guidance for nearby states.
- State lawState law
Colorado ID scanning laws
Colorado sets no field or retention limits. See which venues must check ID and where a scanner counts for cannabis.
- State lawState law
Nevada ID scanning laws
Nevada requires a scan or automated check for tobacco and vape buyers under 40. See how that fits with alcohol and local rules.
- State lawState law
Idaho ID scanning laws
Idaho allows ID scanning, and bars and lounges may not let customers under 21 inside. See which IDs count as proof of age.
Still unsure how Utah applies to your venue?
Tell us what type of venue you run and we'll point you to the published rules we know of that may apply.