State guide
Utah ID scanning laws
Utah requires electronic age verification for certain alcohol customers and requires the resulting record to be kept for seven calendar days.
For bars, taverns and restaurants, the key questions are who must be checked, when the check happens, how the ID must be verified and which information has to be retained afterwards.
Reviewed September 15, 2026 ยท 6 primary sources linked
Utah at a glance
- Is it legal to scan IDs in Utah?
- Yes.Utah requires electronic age verification in situations covered by the rule and recognizes specific technologies for completing the check.
- Do you have to check IDs in Utah, and when?
- Yes, for customers who appear 35 or younger.Bars and taverns verify age at admission. Restaurants verify age before the customer obtains an alcoholic drink.
- Which IDs provide protection in Utah?
- The ID must be capable of being verified under Utah's age-verification rules.If it cannot be checked electronically, the state provides an alternative process.
- Can you keep data from an ID scan in Utah?
- Yes, and Utah specifies how long.Required information must be kept for seven calendar days and then deleted.
- What other Utah laws reach the data you keep?
- Utah's broader privacy law can apply to businesses that meet its thresholds.Most ordinary venues will fall outside those thresholds, but other data-security obligations may still matter.
- Does scanning give you a defense if you serve a minor in Utah?
- No, but a scan record can help show which ID staff relied on.The electronic check satisfies an age-verification requirement, but Utah's good-faith defense does not depend on scanning.
- Can a customer refuse an ID scan in Utah?
- Not where the electronic check is required.In those situations, electronic verification is the method Utah requires.
What Utah venues should know
Is it legal to scan IDs in Utah?
Yes. In covered situations, Utah requires age to be verified electronically.
Utah requires certain alcohol licensees to electronically verify proof of age.
The rule recognizes several ways to complete the check, including:
- Reading the magnetic stripe
- Reading the two-dimensional barcode
- Using another technology capable of verifying the credential electronically
For venues covered by the requirement, electronic verification is therefore part of the required age-checking process rather than an optional extra.
Do you have to check IDs in Utah, and when?
Yes, when the customer appears to be 35 or younger.
When the check happens depends on the type of venue.
Bars and taverns
Age is verified when the customer is admitted. For a typical bar or tavern, that makes the electronic check part of the door process.
Restaurants
Full-service, limited-service and beer-only restaurants verify age before a customer who appears 35 or younger obtains an alcoholic product. The check therefore happens before the alcohol is served rather than automatically at the entrance.
Which IDs provide protection in Utah?
Utah focuses on whether the credential can be verified under the state's age-verification process.
The rule is built around electronic verification rather than a short list of approved document types. If the credential can be electronically verified using one of the permitted methods, it can be used in the normal verification process.
If it cannot be electronically verified, Utah provides an alternative procedure that the venue must follow. That means a failed scan does not simply end the process, but the venue must use the documented alternative rather than inventing its own workaround.
Can you keep data from an ID scan in Utah?
Yes. Utah requires specific information to be kept for seven calendar days and then deleted.
Utah is unusual because it specifies both the information that must be retained and the retention period.
The record includes:
- Type of proof of age
- Identification number
- Expiration date
- Name
- Date of birth
- Date and time of the verification
That information must be kept for seven calendar days. After that period, it must be deleted.
So for venues covered by the rule, seven days is not simply a maximum retention option. It is the required retention window.
The exact wording
An applicable licensee shall retain, for a period of seven calendar days: (i) the information obtained from an individual's proof of age; and (ii) the time and date the proof of age was verified.
What other Utah laws reach the data you keep?
Utah also has a broader consumer privacy law, but it applies only to businesses that meet certain thresholds.
The Utah Consumer Privacy Act has applied since 2023.
Unlike the state's alcohol age-verification rules, it does not automatically apply to every bar, restaurant or retailer. Coverage depends on factors such as revenue and the amount of personal data processed.
For most venues, the specific seven-day alcohol verification rule is likely to be the more immediate requirement. Utah does not have a general private-sector biometric privacy law comparable to Illinois BIPA.
Does scanning give you a defense if you serve a minor in Utah?
No. The required electronic check and Utah's legal defenses are separate.
Electronic age verification is a compliance requirement in the situations covered by the statute. But performing that scan does not automatically create a defense if alcohol is later served to a minor. Utah's good-faith defense is not conditioned on using a scanner.
The law separately recognizes a signed statement of age as part of the defense framework. So a venue should treat the required electronic check as an age-verification step, not as automatic legal protection.
Can a customer refuse an ID scan in Utah?
Not where electronic verification is required.
For customers who fall within Utah's age-verification rule, the electronic check is part of the prescribed process. The law does not create a right for the customer to replace that required electronic verification with a simple visual inspection. If the credential cannot be electronically verified, the venue must follow the alternative process provided by the state.
Bars, taverns, restaurants and your records
Bars and taverns
Verify age when the customer enters.
For customers who appear 35 or younger, bars and taverns complete the electronic age check at admission. That makes Utah's rule directly relevant to the door workflow.
Utah Code 32B-1-407(3)Restaurants
Verify age before alcohol is served.
Full-service, limited-service and beer-only restaurants perform the check before a customer who appears 35 or younger obtains an alcoholic product. The requirement therefore follows the alcohol transaction rather than ordinary admission to the venue.
Utah Code 32B-1-407(3)Your records
Keep the required record for seven calendar days, then delete it.
Utah identifies six pieces of information that must be retained as part of the age-verification record. The retention period is fixed at seven calendar days. For covered venues, the record should therefore neither disappear earlier nor remain available indefinitely.
Utah Admin. Code R82-4-101(7)What this means for your AgeShield setup
These are the AgeShield settings affected by the Utah rules above. How you configure them is ultimately a decision for your venue.
- How long visits are kept
- Utah requires the age-verification record to be kept for seven calendar days and then deleted.AgeShield setting: Set the retention period to seven calendar days for records covered by the Utah rule.
- Which ID fields are stored
- Utah identifies six items that form part of the required record: proof-of-age type, identification number, expiration date, name, date of birth, and the date and time of the check.AgeShield setting: Configure the stored ID fields so the required Utah record contains the information the rule calls for.
- Manual entry
- If a credential cannot be verified electronically, Utah provides an alternative process.AgeShield setting: Enable manual entry so staff have a documented fallback when the credential cannot be electronically verified.
- Door workflow
- Bars and taverns perform the check at admission, while restaurants complete it before alcohol is served.AgeShield setting: Configure the scanning workflow around where the verification is required in your venue: at the door for bars and taverns, or before alcohol service for restaurants.
- Banned lists and automatic flags
- Utah's mandatory record exists for age verification. Other uses of scan-derived information are separate from that requirement.AgeShield setting: Review any additional use of the scan result, such as list matching or repeat-visitor recognition, separately from the required seven-day verification record.
Common questions
Is it legal to scan IDs at a bar in Utah?
Yes. In covered situations, Utah requires electronic age verification and recognizes specific electronic methods for performing it.
Do you have to check IDs in Utah?
Yes, for customers who appear to be 35 or younger. Bars and taverns check at admission, while restaurants check before the customer obtains alcohol.
Which IDs provide protection in Utah?
Utah focuses on whether the credential can be verified through the required process. If electronic verification is not possible, the state provides an alternative procedure.
How long can I keep ID scan data in Utah?
For records covered by the alcohol age-verification rule, seven calendar days. The required information is kept for that period and then deleted.
What information has to be kept?
The record includes the type of proof of age, identification number, expiration date, name, date of birth, and the date and time of the check.
Does scanning give you a defense if you serve a minor in Utah?
No. The electronic verification satisfies an age-checking requirement, but Utah's good-faith defense does not depend on scanning.
Can a customer refuse an ID scan in Utah?
Not where electronic verification is required. If the credential cannot be electronically verified, the venue must use the alternative process provided by the state.
Sources
- Utah Code 32B-1-407
- Utah Admin. Code R82-4-101
- Utah Code Title 13, Chapter 61
- Utah Code 13-61-102
- Utah Code 32B-1-408(2)
- Utah Code 32B-1-406(2)
This page is for informational purposes only and is not a substitute for professional legal advice. We research each rule and link its source, so you can check it against your own venue. Questions are welcome at support@ageshield.bar.
ID scanning laws in nearby states
Rules change across state lines. Compare the ID-scanning guidance for nearby states.
- State lawState law
Colorado ID scanning laws
Colorado sets no field or retention limits. See which venues must check ID and where a scanner counts for cannabis.
- State lawState law
Nevada ID scanning laws
Nevada requires a scan or automated check for tobacco and vape buyers under 40. See how that fits with alcohol and local rules.
- State lawState law
Idaho ID scanning laws
Idaho allows ID scanning, and bars and lounges may not let customers under 21 inside. See which IDs count as proof of age.
Still unsure how Utah applies to your venue?
Tell us what type of venue you run and we'll point you to the published rules we know of that may apply.