Utah Code 32B-1-407 requires bars, taverns, off-premise beer retailers, and certain restaurants to electronically verify proof of age. Since 2026, bars, taverns, and off-premise beer retailers must check every patron regardless of apparent age — restaurants only need to check patrons who appear 35 or younger.
Last checked against Utah Code, House Bill 437, and House Bill 59 in August 2026.
Utah Code 32B-1-407 sits inside the state's Proof of Age Act (Title 32B, Chapter 1, Part 4). It requires certain alcohol licensees — the statute calls them “applicable licensees” — to verify a patron's age before admission or service, and spells out how that verification has to work.
A 2026 amendment (House Bill 59) removed dining club from this list. Off-premise beer retailer applies specifically to curbside beer sales under 32B-7-202(8).
The rule isn't the same for every license type. An authorized person must verify proof of age before every individual — regardless of apparent age — who gains admittance to the premises of a bar or tavern, or who purchases beer from an off-premise beer retailer under the curbside-sale provisions of 32B-7-202(8). For full-service, limited-service, and beer-only restaurants, the trigger is narrower: verification is required before an individual who appears to be 35 years old or younger procures an alcoholic product in the restaurant's dispensing area.
An authorized person must request the patron's proof of age, then verify it electronically under the commission's verification program. If the ID can't be verified electronically, staff follow the alternate process the Alcoholic Beverage Services Commission sets by rule — visual inspection alone isn't the default path.
The commission's electronic verification program can display no more than the individual's name, age, the number assigned to their ID by the issuing authority, birth date, gender, and the ID's status and expiration date. The commission is separately required to make sure the program's technology can determine whether a state-issued ID card is valid — by comparing its barcode to other legitimate barcodes or identifying patterns common to legitimate cards from that state (32B-1-407(5)(b)).
Two bills changed 32B-1-407 for 2026. House Bill 437, Interdicted Person Amendments (2025 General Session), took effect January 1, 2026, and initially struck the phrase “who appears to be 35 years of age or younger” from subsection (3) across the board — every applicable licensee, including dining clubs, would have had to verify every patron regardless of apparent age.
House Bill 59, Identification Verification Amendments (2026 General Session, retrospective to January 1, 2026), narrowed that before it fully took hold. Under the law as it now reads, bars, taverns, and off-premise beer retailers making curbside beer sales still must verify every patron regardless of how old they look. Full-service, limited-service, and beer-only restaurants are back to verifying only patrons who appear 35 or younger. H.B. 59 also removed dining club from the list of “applicable licensees” entirely — that license type is no longer covered by this section.
The same bill created Utah's “interdicted person” system. A court may designate someone convicted of an extreme DUI as an interdicted person, prohibited from purchasing alcohol for a set period; that person's Utah driver license or ID card is marked “NO ALCOHOL SALE” above the photo. Separately from the 32B-1-407 electronic-verification mandate, HB 437 added a new duty in 32B-4-405(2): before any sale or furnishing of an alcoholic product, a person must verify whether the buyer is an interdicted person by examining their ID or license. That duty isn't limited to the six 32B-1-407 license types — it applies to anyone selling or furnishing alcohol in Utah.
Because interdicted designations only started in 2026 and aren't retroactive, the Department of Alcoholic Beverage Services expects very few interdicted IDs to show up at first — but the verification duty itself is already in effect.
Utah Code 32B-1-407(5)(a)(ii)(B) sets a hard cap: information obtained during an ID check may be retained for no more than seven days after the day it was obtained. Subsection (5)(a)(ii)(A) limits its use strictly to verifying proof of age, and a licensee also can't disclose that information except as the alcoholic beverage title allows (32B-1-407(6)(a)).
Here's how Check ID's design relates: Check ID doesn't keep the personal fields from a scan — no name, date of birth, photo, or ID number — on its servers at all. The app reads the barcode or mobile driver's license, shows your staff member the result, and moves on. On Team accounts, the only thing that persists server-side is a scrambled, one-way fingerprint used to catch repeat entries, and that expires automatically on a short, configurable window of its own. There's no seven-day clock to manage on Check ID's end, because there's no scanned personal data sitting on a server to purge in the first place — the retention cap is satisfied by design for anything the app itself would otherwise store.
A practical checklist for applying 32B-1-407 and the 2026 changes on the ground.
What the app actually does — no more, no less.
Reads the AAMVA barcode on the back of U.S. driver's licenses and state IDs, plus mobile driver's licenses from Apple Wallet via NFC — decodes name, age, and expiration in under a second.
Every check is logged with a timestamp, the result, and which staff member performed it, on shared devices at the door.
Generate a PDF or CSV compliance report with a verification code that anyone — a regulator, a landlord, an insurer — can confirm against the official hosted copy at checkidapp.com/verify.
A one-way, scrambled fingerprint of a scanned ID — not the ID data itself — flags the same ID re-entering across your devices within a configurable window, then expires automatically.
Under 32B-1-407(4), an authorized person must first try to verify proof of age electronically under the state's verification program. Only if the ID can't be verified electronically may staff fall back to the commission's alternate process. For the six applicable licensee types, electronic verification is the default requirement, not an option.
Six license types: bar, tavern, full-service restaurant, limited-service restaurant, beer-only restaurant, and off-premise beer retailers selling beer under the curbside provisions of 32B-7-202(8) (32B-1-407(1)). Dining clubs were removed from this list by a 2026 amendment. Most other off-premise sellers and retailers aren't covered by this specific mandate, though a separate 2026 change requires them to check for interdicted-person status before every sale (32B-4-405(2)).
Seven days. 32B-1-407(5)(a)(ii)(B) caps retention at seven days after the information is obtained, and (5)(a)(ii)(A) limits its use to verifying proof of age. A licensee also may not disclose that information except as the title allows (32B-1-407(6)(a)).
In two steps. House Bill 437, effective January 1, 2026, initially removed the “who appears to be 35 years of age or younger” qualifier from 32B-1-407(3) for every applicable licensee. House Bill 59 (2026 General Session, retrospective to January 1, 2026) then narrowed that: restaurants are back to verifying only patrons who appear 35 or younger, while bars, taverns, and off-premise beer retailers must verify every patron. H.B. 59 also removed dining club from the applicable-licensee list. Separately, H.B. 437 created the “interdicted person” designation (32B-4-405), marked “NO ALCOHOL SALE” on a Utah ID or license, and a duty to check for it before any alcohol sale.
Utah law doesn't say a scanner eliminates liability. 32B-1-407(6)(b) treats verification information as an operational record — a timestamped log of the check becomes part of your documentation. Whether that documentation helps in a specific matter is a question for your attorney, not something a scanning app can decide.
Partly. Off-premise beer retailers making curbside beer sales are one of the six covered license types and must verify every customer. Most other off-premise retailers aren't covered by 32B-1-407's electronic-verification mandate, but they're still bound by the general Proof of Age Act and, as of 2026, the interdicted-person check in 32B-4-405(2). Confirm your specific obligations with the Department of Alcoholic Beverage Services.
Check ID reads barcodes and mobile driver's licenses, logs every check, and gives your team compliance reports built for exactly this kind of question.