Virginia ID scanning laws

Is it legal to scan IDs in Virginia?

Yes, when the scan is made for one of the purposes Virginia lists.

Virginia has a law written specifically about scanning a driver's license or ID card. It sits in the state's privacy law rather than its alcohol law, and it allows a business to scan the barcode only for one of the purposes it lists. A scan for any other purpose is not allowed.

The purposes are:

The law applies to businesses that sell goods or services, and it does not require anyone to scan. What it controls is why a scan is made and what happens to the information afterwards.

Do you have to check IDs in Virginia, and when?

The answer depends on what the venue sells.

Which IDs provide protection in Virginia?

Virginia recognizes a broad set of government-issued credentials for alcohol age verification.

The accepted evidence includes:

Student IDs do not qualify. Virginia also offers a mobile ID, and state law leaves acceptance of the electronic credential to the person or business it is presented to.

Can you keep data from an ID scan in Virginia?

Yes, but it depends on why the ID was scanned.

Virginia lets a business keep information from a scan made for any of the listed purposes except one. That includes a scan made to check that an ID is genuine, or to confirm a customer's identity for a membership, a non-cash payment or a return.

The exception is a scan made only to check a customer's age. Information from that kind of scan may not be kept, and the rule covers any age-restricted goods or services, not only alcohol.

Kept information must be destroyed once the purpose it was kept for has been served. Virginia sets no number of days. The law also limits scans for returns and refunds made through a fraud-prevention service to the customer's name, address, date of birth and ID number.

Scan information may not be sold or shared with anyone for marketing, advertising or promotion, and a customer cannot agree to set any of these rules aside.

What other Virginia laws reach the data you keep?

Stored ID information can also fall under Virginia's general data and breach laws.

The Virginia Consumer Data Protection Act generally applies at 100,000 consumers, or at 25,000 where more than half of gross revenue comes from selling personal data. Covered businesses must limit collection to what is adequate, relevant and reasonably necessary for the disclosed purposes and maintain reasonable data security.

Virginia's breach-notification law is broader in size and can apply whenever a business owns or licenses covered personal information, including a person's name combined with a driver's license or state ID number.

Does scanning give you a defense if you serve a minor in Virginia?

A scanner does not create a separate alcohol defense, but it can support the careful inspection Virginia expects.

Virginia builds the ID requirement into the offense itself. The state looks at whether staff demanded and relied in good faith on genuine proof of age and whether the photograph and description were consistent with the customer.

Virginia ABC also expects the identification to be scrutinized for authenticity and proper order. Electronic verification can support that process, but it does not replace the staff comparison or create a standalone defense.

For the liquor license, separate provisions limit or reduce certain administrative consequences when the statutory conditions and training requirements are met.

Can a customer refuse an ID scan in Virginia?

Virginia does not create a specific right to refuse a scan and does not require a manual alternative.

The scanning statute applies to information obtained from the machine-readable zone. It does not address information staff read from the printed face and enter manually.

For products where qualifying photo ID is mandatory, the customer still must provide acceptable proof of age if the sale is to proceed. Any refusal policy remains subject to Virginia's public-accommodation law.