Skip to main content

State guide

Washington ID scanning laws

Washington gives bars and restaurants flexibility to use ID scanning, with no general scan-specific field or retention limits.

For bars, restaurants and retailers, the key questions are when identification needs to be checked, what information may be kept afterwards and how electronic verification fits alongside Washington's separate liquor-law protections.

Reviewed September 19, 2026 ยท 11 primary sources linked

Washington at a glance

Is it legal to scan IDs in Washington?
Yes.Washington does not generally restrict ID scanning by bars, restaurants or retailers. One narrow class of dine-in theater licensees is actually required to use ID scanners at the point of sale.
Do you have to check IDs in Washington, and when?
There is no general electronic-scanning requirement for alcohol.Tobacco and vapor sellers have a more explicit duty to verify age when there is reason to question the customer's eligibility.
Which IDs provide protection in Washington?
Washington uses a specific list of accepted credentials.It includes licenses and IDs from US states and Canadian provinces, passports, military IDs, Permanent Resident cards, NEXUS cards and several other government-issued credentials.
Can you keep data from an ID scan in Washington?
Yes.Washington does not set a scan-specific retention period or field limit for ordinary venue ID records. Broader disposal and breach-notification rules can still apply.
What other Washington laws reach the data you keep?
Washington has several targeted privacy and data-security laws.These include breach-notification, biometric, record-disposal and consumer-health-data rules.
Does scanning give you a defense if you serve a minor in Washington?
Not by itself.Scanning can support the age check, but Washington's specific liquor-law immunity depends on a signed certification card when the statutory conditions are met.
Can a customer refuse an ID scan in Washington?
Washington does not create a specific right to refuse a scan.A venue may set its own ID-checking policy, subject to applicable anti-discrimination rules.

What Washington venues should know

Do you have to check IDs in Washington, and when?

Washington does not impose a general electronic ID-checking requirement for alcohol sales.

The liquor code requires customers to present acceptable identification when requested, while the regulations define which credentials qualify. Washington does not generally require ordinary alcohol licensees to use a scanner.

Tobacco and vapor sales work differently. Where there is reason to question whether the customer is legally old enough, the seller must require qualifying identification bearing a photograph and signature.

Some Washington rules also assume that staff will perform a visual check. For example, age-restricted self-checkout transactions must stop for employee verification, and licensed premises must have enough light for identification to be checked and customers to be observed.

Which IDs provide protection in Washington?

Washington recognizes a broad but specific list of government-issued credentials.

Accepted identification includes:

  • A driver's license, instruction permit or ID card from a US state, Canadian province, US territory or the District of Columbia
  • A Washington identicard
  • A US armed forces ID
  • A passport or passport card
  • A Global Entry card
  • A Permanent Resident card
  • A NEXUS card
  • A Merchant Marine ID
  • Certain tribal enrollment cards approved by the Liquor and Cannabis Board

The credential generally must display the holder's photograph, date of birth and signature, although federally issued identification does not always require a visible signature.

Washington also makes clear that the identification rules cannot be applied differently based on protected characteristics. That matters particularly for credentials such as Permanent Resident and NEXUS cards, which must be handled consistently with other accepted IDs.

Can you keep data from an ID scan in Washington?

Yes. Washington does not set a scan-specific field limit or retention period for ordinary venue ID records.

The liquor rules do not specify which ID fields may be stored, how long an ID record may be retained or a particular purpose for which it must be used. The Liquor and Cannabis Board's separate three-year recordkeeping rule applies to financial and business records, not ordinary customer ID records.

Broader Washington law does still apply when personal information is eventually discarded. Government-issued identification numbers, including driver's license numbers, must be destroyed appropriately when the business no longer intends to retain the record.

That disposal rule can also create private liability if personal information is not handled properly.

What other Washington laws reach the data you keep?

Washington has several targeted privacy and data-security laws that can apply depending on what your venue stores.

Washington's breach-notification law covers certain combinations of personal information, including a person's name together with a driver's license or state ID number, as well as full dates of birth and some biometric data.

Washington also has a biometric privacy law, although it is narrower than laws such as Illinois BIPA. Photographs and information derived from photographs receive different treatment from biometric identifiers collected for commercial purposes.

The state's consumer health data law is broader in another direction. Ordinary age-verification records will not normally become health data simply because someone entered the venue, but free-text notes that describe a person's medical condition or health status can create a different privacy issue.

For venues, the practical distinction is important: store what is necessary for the ID-checking workflow and avoid turning operational door notes into sensitive personal profiles.

Does scanning give you a defense if you serve a minor in Washington?

Scanning can support the age check, but Washington's specific liquor-law immunity depends on a separate signed certification card.

Where the statutory conditions apply, Washington protects a licensee when the customer presents acceptable identification and signs a certification card supplied for that purpose.

The card records information about the credential and the customer's signature. It must be completed and maintained in the manner Washington requires.

This step is particularly relevant when staff remain uncertain about the customer's age after reviewing the identification. A successful scan does not by itself replace the signed certification card where the statute calls for one.

That does not make scanning irrelevant. An electronic ID check can still support the venue's verification process, flag inconsistencies and create an operational record of what staff checked. It simply should not be treated as a substitute for Washington's separate certification-card procedure when that procedure is needed.

Can a customer refuse an ID scan in Washington?

Washington does not specifically give customers a right to refuse a scan.

The state also does not generally require ordinary bars and restaurants to provide a particular manual alternative. A venue may therefore establish its own ID-checking and admission policy, provided it complies with other applicable laws.

Washington's identification rules expressly prohibit discriminatory treatment. A venue should therefore apply its policy consistently across customers and across the different credentials Washington recognizes, including Permanent Resident cards and NEXUS cards.

A customer who declines a scan may still be required to present acceptable identification if the venue requires proof of age for admission or service.

Alcohol, tobacco and cannabis

Alcohol

ID scanning can support your alcohol age-verification process, while Washington's statutory immunity uses a separate certification-card procedure.

Ordinary alcohol licensees are not generally required to scan. Electronic verification can still help staff check the credential and document the interaction, but it does not replace the signed certification card when Washington's immunity procedure calls for one.

RCW 66.20.210

Tobacco and vape

Washington provides a clearer reliance-based protection for tobacco and vapor sales.

Sellers must verify age when there is reason to question the customer's eligibility, and the law provides a defense based on reasonable reliance on qualifying identification. That framework does not require a separate certification card or a particular electronic device.

RCW 70.155.090

Cannabis

Cannabis businesses should pay particular attention to what they record beyond the basic ID check.

Washington does not impose a separate scan-specific field limit for cannabis retailers. However, the state's consumer health data law can become relevant if a venue records information revealing a customer's health status or medical condition.

Keep ordinary age-verification and access records focused on identity, age and conduct rather than unnecessary health-related notes.

RCW 19.373

What this means for your AgeShield setup

These are the AgeShield settings affected by the Washington rules above. How you configure them is ultimately a decision for your venue.

How long visits are kept
Washington does not set a specific retention period for ordinary ID-verification records.AgeShield setting: Choose a retention period based on your venue's operational and compliance needs, and make sure records are removed when that period ends rather than being kept indefinitely.
Which ID fields are stored
Washington does not impose a scan-specific list of fields that ordinary venues may retain.AgeShield setting: Store the ID fields your venue actually needs rather than collecting unnecessary information by default.
The signed certification card
Washington's liquor-law immunity uses a separate certification card signed by the customer in the circumstances the statute describes.AgeShield setting: Treat the AgeShield scan record as part of your electronic verification workflow, but maintain a separate process for the Washington certification card when it is required.
Accepted credential types
Washington recognizes several credentials beyond ordinary driver's licenses, including Permanent Resident and NEXUS cards.AgeShield setting: Make sure staff workflows and accepted-ID policies handle all qualifying Washington credentials consistently.
Notes and reason codes
Washington's consumer health data law can apply when records identify a person's health status.AgeShield setting: Keep visit notes focused on observable conduct and operational reasons rather than unnecessary descriptions of a customer's health or medical condition.
Banned and watch lists
Washington does not impose a scan-specific prohibition on maintaining venue access records, but anti-discrimination and privacy rules still apply.AgeShield setting: Use clear, behavior-based reasons for banned and watch-list entries and limit the information stored to what your venue actually needs.

Common questions

Is it legal to scan IDs at a bar in Washington?

Yes. Washington does not generally restrict ID scanning by bars or restaurants.

Do you have to check IDs in Washington, and when?

There is no general electronic-scanning requirement for ordinary alcohol venues. Tobacco and vapor sellers have a more explicit age-verification duty when there is reason to question the customer's age.

Which IDs provide protection in Washington?

Washington recognizes a specific list that includes state and provincial licenses and IDs, passports, military IDs, Permanent Resident cards, NEXUS cards and several other government-issued credentials.

Can you keep data from an ID scan in Washington?

Yes. Washington does not set a general scan-specific retention period or field list for ordinary venue ID records. Broader disposal and breach-notification requirements can still apply.

Does scanning give you a defense if you serve a minor in Washington?

Not by itself. Washington's specific liquor-law immunity depends on its signed certification-card process. Scanning can still support the venue's age-verification workflow and recordkeeping.

Can a customer refuse an ID scan in Washington?

Washington does not create a specific right to refuse a scan. Venues may establish their own policies, subject to anti-discrimination and other applicable laws.

Does Washington require any businesses to use ID scanners?

Yes. Certain spirits, beer and wine theater licensees operating premises frequented by minors must use electronic identification scanners at points of sale.

How long can I keep ID scan data in Washington?

Washington does not set a specific maximum or minimum retention period for ordinary venue ID records. Businesses should choose a retention policy and properly destroy covered personal information when it is no longer retained.

Does Washington have a comprehensive privacy law?

Washington instead relies on several targeted laws covering areas such as data breaches, biometrics, consumer health data and disposal of personal information.

Sources

This page is for informational purposes only and is not a substitute for professional legal advice. We research each rule and link its source, so you can check it against your own venue. Questions are welcome at support@ageshield.bar.

All state ID scanning guides

Still unsure how Washington applies to your venue?

Tell us what type of venue you run and we'll point you to the published rules we know of that may apply.