State guide

New York ID scanning law: age checks, records and limits

By Apparent Logic, LLC · Updated October 5, 2026
Legal sources checked October 5, 2026 · How we review sources

General information, not legal advice. Laws and permit conditions vary; ask your lawyer or regulator what applies. Check ID is a tool for your staff, not a guarantee of compliance or a legal defense. No system can catch every fake ID. Staff must inspect the document and its holder and make the final decision.

Can a New York bar rely on an ID scan? A successful transaction scan can be one part of a narrowly defined defense under ABC Law §65-b. It does not replace staff diligence, establish that a document is genuine, or automatically protect the business.

At a glance

The transaction-scan defense applies in §65(1) proceedings, with conditions; it is not a general liability shield.
Staff still need to inspect the card, compare its holder and check the decoded information against the printed information.
Scan records and third-party sharing are restricted. An app’s default retention is not a statement of what the law allows.

When does a transaction scan help?

§65-b(7)(a) sets three elements: a driver’s license or non-driver ID apparently issued by a government entity, a successfully completed transaction scan, and reasonable reliance on both when selling, delivering or giving the alcohol. The liquor authority considers an implemented written policy when evaluating the defense.

The same paragraph preserves reasonable diligence and excludes the defense from other civil or criminal proceedings and forums. Do not treat it as automatic protection in a dram-shop or negligence claim. §65(6) separately addresses photo-ID and training-certificate defenses in specified license proceedings.

§65-b(1) defines the relevant device and transaction scan, including point-of-sale or entry use. We do not claim that Check ID qualifies under those definitions or supplies a legal defense. Ask a New York attorney or the State Liquor Authority about your particular equipment and process.

What should staff check at the door or counter?

§65-b(2)(b) lists acceptable evidence of age: specified government driver’s licenses and non-driver cards, valid passports from any country, and US armed-forces ID. The list’s issuers and document conditions matter; a readable barcode alone does not make a document acceptable.

Under §65-b(2)(c), an attempted purchase must be denied if the decoded information differs from the printed information or the scan indicates false or fraudulent information. Agree with your lawyer on staff procedures for unreadable cards, photo mismatches and other concerns. A scan does not remove that judgment.

What scan information may a licensee keep?

§65-b(7)(b) limits recorded scan information to what is necessary for the section’s purposes, and no more than the name, birth date, license or ID number and expiry date. This is a limit, not a requirement to collect all four.

§65-b(8) restricts use to the specified defense and generally prohibits resale or dissemination to third persons, including marketing. It allows release under a court-ordered subpoena or a statute specifically authorizing release. Review any cloud storage, repeat-entry codes and analytics with counsel; using fewer fields does not decide whether these restrictions apply.

Where Check ID fits

On iPhone and iPad, Check ID reads supported US and Canadian license and ID-card barcodes and compares the encoded birth and expiry dates with your configured rules. A “Verified” barcode result means the information passed those checks; it does not prove that the card is genuine or belongs to the holder. A fake can encode plausible information.

Scan history does not store the scanned person’s name, birth date, address, document number or an ID photo. Records can include the outcome, age in whole years, issuing jurisdiction, document type and scan time. Teams adds venue, device and operator attribution when available. Teams keeps records on our servers for two years by default; Free and Pro history covers seven days on the device or in your iCloud.

Repeat-entry codes, guest lists and product analytics have separate handling. See Security and data for the details and How verification works for supported checks and limitations. Data minimization does not establish that the app’s storage or sharing fits a particular law.

For this state, specifically ask how §65-b(7)(b) and (8) apply to Check ID’s scan records, repeat-entry codes, guest-list names and transmissions. A report documents recorded activity; it does not certify compliance.

Sources and review scope

Frequently asked questions

Is ID scanning a complete legal defense for a New York bar?

No. §65-b(7)(a) has conditions, preserves reasonable diligence and applies only in §65(1) proceedings. Check ID does not guarantee a defense or claim statutory device qualification.

Can I keep a customer list from alcohol ID scans?

The law limits scan records and their use, and generally prohibits third-party dissemination or marketing use. Do not use scan data to build a marketing list. Ask counsel about your workflow, including any separately entered guest-list names.

What does a “Verified” barcode result mean?

It means the encoded information passed the app’s configured checks. It does not prove the card is genuine or belongs to the person presenting it. Staff must inspect both.

Do I need a written ID-checking policy?

§65-b(7)(a) says an implemented written policy is considered when evaluating the transaction-scan defense. Ask your attorney what your policy, training and records should contain.