Utah ID Scanning Laws & Regulations: Everything You Need to Know About the 2026 Changes

Effective January 1, 2026, Utah implemented a transformative “100% ID” law that fundamentally restructured alcohol verification requirements across the state. This legislation represents the most significant change to Utah’s alcohol compliance framework in decades, eliminating all age-based discretion that previously allowed businesses to skip ID checks.

The new law mandates ID checks for all alcohol purchases, applying regardless of the customer’s apparent age. Whether you are 21, 50, or 90 years old, you must now present valid identification to purchase alcohol anywhere in Utah.

The universal ID checking requirement applies comprehensively across Utah’s entire alcohol distribution network:

• State-operated liquor stores and package agencies operating under state contracts
• Grocery and convenience stores selling beer, including gas stations with beer licenses
• Restaurants, bars, and taverns of all types, including dining clubs, full-service restaurants with liquor licenses, limited-service restaurants, and beer-only restaurants
• Specialty venues such as breweries and distilleries with retail operations, event venues with temporary permits, hotels with hospitality licenses, and airports with lounge licenses

The law’s universality is absolute. There are no exceptions for anybody—any individual who purchases alcohol or enters a bar must present valid identification, including bar owners, kitchen staff, delivery drivers, and long-time regular customers. This comprehensive approach eliminates favoritism, prevents discrimination claims, and ensures consistent screening across every transaction.

ID checks and electronic scanning only apply to customers ordering alcoholic beverages or entering a bar or tavern, meaning general restaurant patrons not purchasing alcohol don’t require verification

While the new law requires every alcohol purchaser to present identification, it does not uniformly require electronic scanning. Scanning obligations vary based on license type and setting:

• Bars and Taverns: Electronic scanning required at entry for all customers
• Dining Clubs: Electronic scanning required when procuring alcoholic products
• Full-Service Restaurants: Electronic scanning required in dispensing areas (bar areas)
• Limited-Service Restaurants: Electronic scanning required in dispensing areas
• Beer-Only Restaurants: Electronic scanning required in dispensing areas

Off-premise retailers—including grocery stores, convenience stores, and state liquor stores—may rely on visual verification without mandatory electronic scanning. Visual inspection remains lawful in these settings, though businesses may voluntarily implement scanning systems for enhanced accuracy and compliance protection.

However, even when electronic scanning is used, visual inspection remains a critical compliance step due to current technology limitations in detecting interdicted person status.

Electronic verification programs are strictly limited in what information they may display to staff. Permissible data elements include:

• Name and date of birth
• ID number and expiration date
• Gender
• Age
• Interdicted status indicators

The deliberately restricted data display protects customer privacy by preventing unnecessary personal information exposure during routine verification transactions.

“Businesses that use ID scanners do not need to replace and can continue using their existing scanners. (The state legislature will consider this piece of the law in their upcoming 2026 General Session. The DABS will update as we learn new information.)” – https://abs.utah.gov

The universal verification mandate serves a dual purpose beyond traditional underage drinking prevention. Under Utah’s new framework, courts can designate someone an “interdicted person”—a legal status imposed following certain serious alcohol-related driving outcomes.

This court-ordered alcohol restriction creates a legal prohibition on purchasing or possessing alcoholic beverages for a specified period, typically aligned with probationary terms.

An extreme DUI occurs when someone is found to have a blood alcohol level of 0.16 or higher, or when alcohol is combined with other illegal substances in their system. This threshold exceeds three times Utah’s already strict 0.05% BAC limit—the lowest legal limit in the United States.

Those convicted of extreme DUI are automatically placed in the interdicted category. Those convicted of standard DUI can be placed in the interdicted category at judicial discretion. The interdiction period is determined by the court, typically lasting for the length of the probationary period.

Interdicted individuals receive specially marked identification from the Utah Driver License Division. These IDs feature:

• “NO ALCOHOL SALE” text printed prominently above the individual’s photo
• A prominent red stripe on the front of the card
• Specialized security features beyond standard anti-counterfeiting measures

 Note: In the future, IDs will also contain machine-readable encoded data indicting interdicted status.

The deliberate design ensures even cursory visual inspection reveals restriction status without requiring detailed examination or specialized training.

While interdicted status will eventually be encoded in the ID’s machine-readable data, visual inspection remains mandatory even when electronic scanning is performed.

Beyond court-ordered designations, the law includes an innovative harm reduction provision: individuals may voluntarily request the “No Alcohol Sale” notation on their ID. This approach recognizes that some people benefit from external purchase barriers supporting personal sobriety goals, expanding interdiction beyond punitive judicial orders into voluntary behavioral health support.

Voluntary participants commit to minimum 30-day restriction periods before requesting standard credentials, preventing impulsive decisions during vulnerable moments.

The law explicitly states that a person may not sell, offer for sale, or furnish an alcoholic product to a known interdicted person. When an interdicted ID is presented, businesses have zero discretion—the sale must be refused.

Employees checking IDs must rely on visual inspection for the “No Alcohol Sale” language on the ID card, as electronic scanners may not reliably detect interdicted status. This creates a mandatory two-step verification process: electronic scanning (where required) plus visual inspection for the interdiction marker.

Utah Code Section 32B-1-407 establishes comprehensive privacy protections governing information collected during ID verification, balancing legitimate business verification needs with robust consumer privacy safeguards.

Data obtained through ID verification may only be used for purposes of verifying age and interdicted person status in accordance with legal requirements. The statute limits permissible data use exclusively to these verification functions, prohibiting any secondary commercial purposes.

The law establishes strict temporal boundaries on data retention: information obtained may only be retained for seven days after the date it was originally obtained. This time-limited retention prevents businesses from building long-term customer databases under the guise of age verification compliance.

The seven-day window accommodates legitimate operational needs—such as investigating disputed transactions or responding to regulatory inquiries—while preventing indefinite data accumulation that could enable privacy violations or unauthorized commercial exploitation.

The retention limit applies to stored data. Transient data displayed momentarily during verification and not recorded in any system does not trigger retention obligations. However, any data captured in logs, databases, or other persistent storage mechanisms must be purged within the seven-day window.

Businesses retaining any verification data must implement appropriate security measures to protect customer information from unauthorized access, disclosure, or misuse. Required safeguards include:

• Access controls limiting data access to authorized personnel with legitimate verification responsibilities
• Secure storage of any retained data using encryption or other protective technologies
• Audit procedures tracking data access and ensuring compliance with retention limits
• Secure deletion protocols ensuring data is properly destroyed after the seven-day retention period

Regulations explicitly forbid specific practices that would compromise customer privacy or exceed legitimate verification purposes:

• Creating or contributing to marketing mailing lists using verification data
• Deploying verification data for targeted advertising campaigns
• Sending promotional communications based on purchase verification
• Customer profiling for commercial purposes unrelated to age verification
• Making inappropriate personal contact with customers based on information obtained during verification
• Selling or sharing scan data with third parties for any purpose
• Creating consumer profiles that track purchasing patterns or preferences

Many businesses rely on third-party technology providers for ID scanning systems. These vendors function as data processors, handling customer information on behalf of the business during verification transactions.

However, vendor involvement does not transfer compliance obligations. The licensed establishment retains full responsibility for ensuring all data privacy, retention, and security requirements are met, regardless of whether processing occurs through internal systems or third-party platforms.

When contracting with ID scanning technology providers, businesses must:

• Ensure contractual compliance obligations explicitly require vendors to adhere to Utah’s seven-day retention limit and prohibited use restrictions
• Verify vendor security measures meet or exceed required safeguards for customer data protection
• Maintain oversight of vendor data handling practices through regular audits or compliance certifications
• Establish clear data ownership provisions confirming customer information remains subject to Utah’s privacy protections
• Require prompt data deletion when vendor contracts terminate or systems are replaced

The use of third-party systems does not excuse non-compliance. Businesses remain liable for vendor violations of Utah’s data privacy requirements.

Importantly, businesses using existing ID scanners do not need to replace their equipment. The state avoided imposing unfunded mandates on small businesses by grandfathering existing technology investments while establishing standards for new purchases or system upgrades.

Acceptable identification for alcohol purchases includes:

• A valid S. driver’s license from any state
• A state-issued identification card from any state
• A valid S. passport or passport card
• U.S. military ID that includes both a photo and date of birth

Driving privilege cards are not considered valid proof of age for alcohol sales in Utah, regardless of whether they contain photo and birth date information.

For international visitors coming to Utah, international driver’s licenses alone are insufficient for alcohol purchases. Foreign visitors must carry their passport when visiting bars or restaurants if they plan to purchase alcohol. This requirement creates practical challenges for tourists unfamiliar with Utah’s strict identification standards and may catch international visitors off guard.

Utah offers a mobile driver license (mDL) available through the Get Mobile app. However, acceptance remains inconsistent across establishments. Most bars and restaurants have not upgraded their systems to accept mobile IDs, so whether a mobile credential works depends on the specific establishment and whether they have compatible scanning technology.

Implementation details regarding how interdicted person identifiers display on mobile credentials and whether current scanning technology reliably reads these indicators remain under ongoing development. Until universal mobile ID compatibility is achieved, visitors should carry physical identification as backup.

Violations of the interdicted person prohibition trigger escalating administrative penalties based on violation severity and frequency:

• Monetary fines scaled to violation circumstances
• Mandatory business closure periods for serious violations
• License suspension for repeated violations
• Complete license revocation for egregious or persistent non-compliance

The penalty structure creates strong incentives for rigorous verification compliance while allowing proportionate responses to different violation types.

Beyond interdicted person sales, failures to check identification as required or selling to underage individuals result in similar escalating penalties affecting both the establishment and individual employees involved in the transaction.

Utah provides critical legal protections for businesses that make good-faith verification efforts but are deceived by sophisticated fraudulent identification.

Retailers have an affirmative defense where they inspected a false ID and came to a reasonable conclusion based on its appearance that it was valid. This defense recognizes that businesses cannot be held strictly liable for fraud that exceeds reasonable detection capabilities, even with proper verification procedures.

The defense requires demonstrating that:

• The establishment properly checked the presented identification
• The fraudulent ID was sufficiently sophisticated to deceive a reasonable observer
• Verification procedures followed applicable requirements (visual inspection and/or electronic scanning as required)

Retailers also have the statutory right to sue minors who use false IDs to purchase alcohol for any losses or fines suffered by the retailer as a result of the illegal sale. This provision creates financial consequences for those who use fraudulent identification, potentially recovering enforcement costs from those actually responsible for the violation.

This balanced approach holds businesses accountable for negligent verification failures while protecting against liability for sophisticated fraud beyond reasonable detection capabilities.

The Department of Alcoholic Beverage Services conducts ongoing compliance checks using various investigative techniques:

• Underage operatives attempting to purchase alcohol
• Interdicted persons under investigative supervision testing whether establishments properly refuse sales
• Adult investigators presenting various identification scenarios to test verification procedures

These enforcement operations identify violations through controlled purchases, creating ongoing accountability ensuring businesses maintain vigilant verification practices. Compliance checks occur without advance notice and may target any licensed establishment at any time.

The Department of Alcoholic Beverage Services requires comprehensive training programs teaching authorized personnel:

• Proper verification procedures for all transaction types
• Identifying interdicted person credentials through visual inspection
• Recognizing security features indicating authentic versus counterfeit identification
• Understanding acceptable identification forms and regional variations
• Operating electronic scanning equipment correctly
• Applying seven-day data retention requirements
• Avoiding prohibited uses of customer information

All staff handling alcohol transactions must complete training before independently conducting sales, with periodic refresher training ensuring continued compliance awareness.

The universal verification requirement significantly impacts operational practices:

• High-volume venues face longer transaction times during peak periods as every customer must be verified
• Smaller establishments must dedicate increased labor to verification processes, potentially requiring additional staffing during busy periods
• Technology investments become more attractive as businesses seek to automate verification without compromising customer experience
• Queue management requires rethinking to prevent verification bottlenecks at checkout or entry points

Mark Lunt, who runs The Cache Bar and Grill and the Island Market in Logan, describes bars as environments where patrons “are kind of expecting” to be ID’d, while convenience-style settings can catch customers off guard when requesting identification from obviously mature customers.

While not universally mandated, many businesses are voluntarily adopting electronic scanning systems even in settings where visual verification remains permissible. Electronic systems offer:

• Faster verification than manual inspection
• Automated security feature authentication
• Reduced staff training requirements
• Documentation of verification attempts for enforcement defense
• Reduced human error in age calculations

Every person purchasing alcohol in Utah must carry valid identification regardless of age. Real-world enforcement scenarios illustrate practical challenges: one observer witnessed an elderly woman unable to purchase wine at a state liquor store because she no longer drove, her license had expired, and she hadn’t obtained a state ID replacement.

These scenarios create particular hardship for:

• Elderly residents who no longer drive
• Long-time regular customers unaccustomed to carrying identification
• People whose identification has recently expired
• International visitors unfamiliar with Utah’s requirements

Staff have zero discretion to skip verification regardless of circumstances. Claims like “I’m a regular customer,” “I’m clearly over 21,” or “I just forgot my wallet” cannot excuse verification failures. The absolute requirement eliminates subjective judgment, creating consistency but reducing flexibility for unusual circumstances.

Customers should expect:

• Verification at every alcohol purchase without exception
• Refusal of service if valid ID cannot be presented
• Visual inspection of IDs even when electronic scanning occurs
• Immediate refusal if an interdicted ID is presented

Establishments can ensure compliance through:

• Training all staff on verification procedures before handling alcohol transactions
• Maintaining updated equipment capable of reading current credential formats from all states
• Implementing clear policies requiring verification for every transaction without exceptions
• Conducting regular internal compliance audits identifying potential gaps before enforcement actions
• Documenting verification procedures and training efforts to establish good-faith compliance if violations occur
• Staying informed about regulatory updates through DABS communications and industry associations
• Fostering compliance culture prioritizing legal requirements over convenience or customer complaints

DABS provides comprehensive compliance support including training materials, reference guides for identifying valid identification, sample policies and procedures, and technical assistance for implementing verification systems.

The state legislature may consider updates to the new law during the 2026 General Session. DABS is watching the legislative session closely and will update licensees if additional changes are made.

The Salt Lake Area Restaurant Association has advocated for specific modifications:

• Allowing foreign driver licenses instead of requiring passports for international visitors
• Not requiring restaurants to scan guests unless they’re in drink dispensing areas

The law’s passage followed personal tragedy that galvanized reform efforts. In 2022, 13-year-old Eli Mitchell was killed by a drunk driver leaving a bar. His grandfather, Glendon Mitchell, became a vocal advocate for HB 437, working with Representative Steve Eliason who championed the legislation.

This tragic case provided the impetus for comprehensive reform addressing repeat DUI offenders’ continued access to alcohol, ultimately resulting in the interdicted person system and universal verification requirement.

Utah’s 100% ID law is less about catching minors than transforming every alcohol sale into a checkpoint for court-ordered purchasing bans—a policy choice using universal ID presentation to make a relatively small “interdicted person” population identifiable at the counter.

Utah joins a small number of jurisdictions implementing universal verification requirements, placing the state at the forefront of comprehensive verification policy. As the nation’s strictest alcohol verification policy, Utah’s approach creates a complex regulatory framework requiring careful navigation by businesses and thorough understanding by consumers.

Other states are monitoring Utah’s implementation experience. If Utah demonstrates successful outcomes—reduced DUI incidents, lower interdicted person recidivism, decreased alcohol-related injuries and fatalities—national trends may shift toward universal verification policies.

The interdicted person system represents an innovative intersection of criminal justice, public health, and alcohol regulation that may influence policy development nationwide, particularly in states grappling with repeat DUI offenders.

Utah’s new 100% ID alcohol law represents a major shift in alcohol compliance for both businesses and consumers. Every alcohol sale now requires valid identification without exception, fundamentally transforming how alcohol transactions occur across the state.

The law successfully balances multiple policy objectives:

• Underage drinking prevention through universal age verification
• DUI recidivism reduction via the interdicted person system
• Consumer privacy protection through strict data retention and use limitations
• Business compliance support through affirmative defenses and grandfathered technology

The law’s success will be measured through longitudinal studies comparing pre-implementation and post-implementation outcomes on underage drinking rates, DUI incidents, alcohol-related injuries and fatalities, and interdicted person recidivism.

For businesses, compliance requires understanding verification requirements specific to their license type, implementing proper training and procedures, respecting customer privacy through data handling restrictions, and staying informed about regulatory updates and enforcement guidance.

For consumers, the new reality means carrying valid identification for every alcohol purchase regardless of age, understanding that staff have no discretion to skip verification, and expecting visual inspection even when electronic scanning occurs.

As implementation continues and the interdicted ID population grows, ongoing refinement based on practical experience will likely shape the law’s evolution, but the fundamental principle of universal verification represents a permanent transformation in Utah’s alcohol regulatory landscape.