ID scanning laws by province
Your resource for province and federal legislation on ID scanning & identity verification.
ID scanning laws and regulations for Canadian provinces
Click on the states below to view state-specific legislation related to scanning IDs, identity verification, and biometrics.
What types of ID scanning laws does IDScan.net track
Below are a few of the subjects we track to help keep our ID Laws database up to date.
Age verification laws
We track the age verification standards for sale of alcohol, tobacco, cannabis, firearms, eCigarettes, and more.
Age verification laws for eCommerce purchases
We track updates to regulations for websites and eCommerce platforms who may distribute age restricted products.
ID scanning legality
We monitor which provinces allow for digital ID scanning and which disallow it, and any changes in province policy.
PII from a scanned ID
Some provinces restrict which data can be stored from a scanned ID. We keep track of any changes to your ability to save a particular data field.
Acceptable PII uses
Most provinces have guardrails around how PII may be used (credit check, identity verification, etc.) and by whom.
PII retention thresholds
We track all laws related to the length of time a business must retain (or must delete) any saved data.
Consent & waivers
We track requirements related to consent agreements and instances where an individual may need to opt-in before their ID is scanned.
Facial recognition
We track any changes to laws related to facial recognition or usage/storage of biometric information.
ID laws
Due diligence defense
Often confused with affirmative defense, Canada’s Liquor Control and Licensing Act provides a federal framework for “due diligence” defense.
What is due diligence defense in Canada?
The Liquor Control and Licensing Act lays out framework stating businesses must take “reasonable steps” to prevent age restricted sales from minors. By doing so, those steps can be used as a due diligence defense at enforcement hearings.
Which provinces have due diligence defense for ID scanning?
This is enacted at the federal level, so all provinces in Canada are covered by this legal framework.
What are the requirements for taking advantage of affirmative defense for ID scanning?
Businesses must prove “reasonable steps” were taken to prevent age restricted items from being sold. The steps often include:
- Checking valid government ID
- Training staff
- Maintaining records
- Refusing service when unsure
ID scanning laws FAQ
Which provinces can you not scan IDs?
Currently there are no Canadian provinces that explicitly ban ID scanning, but there are restrictions when ID scanning is used.
When is ID scanning recommended?
All provinces require that businesses do due diligence when verifying age for alcohol, tobacco, cannabis, and other age restricted sales. ID scanning can greatly streamline these types of transactions by immediately authenticating the legitimacy of and ID while simultaneously verifying age.
Do I have to inform customers that their ID is being scanned?
Yes, consent is required in all Canadian provinces before an ID is scanned. It is not always explicit verbal consent, but “meaningful consent” under the respective provincial privacy law or depending on the situation.
Which provinces allow a digital drivers license?
As of April 2026, no provinces have an active digital ID, but it has been reported that Alberta, British Columbia, and Ontario are all working on mobile IDs.
How long can data from a scanned ID be retained?
PII retention time frames very by province and sometimes by industry. You will need to fully read the ID laws for your province to determine how long you must retain data from a scanned ID.
Are there provinces which require ID scanning?
No Canadian province explicitly requires ID scanning. However, depending on the use case, ID verification is sometimes required, making ID scanning a time saver as well as a fraud reduction tactic.
Types of ID scanning laws by state
Canada has strict laws surrounding ID scanning, biometric scanning data collection, data retention, and consent. Based on province, applicable privacy and consent laws must be followed when ID scanning.
Applies within Alberta and replaces PIPEDA locally; ID scanning is allowed with consent and a “reasonable purpose” standard, meaning scanning must be proportionate to the use case and excessive data capture or retention can violate the law.
Applies across provinces without their own laws (and to cross-border/federal activities nationwide); ID scanning is permitted with meaningful consent and limited collection, but businesses must ensure they only collect what’s necessary and do not retain ID data longer than needed.
Applies only in Quebec and is the strictest regime in Canada; ID scanning is allowed only with clear, explicit consent and a justified purpose, often requiring a privacy impact assessment, and routine or excessive scanning (especially storing full IDs) is difficult to justify.
Types of ID scanning laws by province
We track all Canadian provinces to ensure you always have the most up-to-date information about current and pending legislation in every jurisdiction.
Due Diligence Defense | Age Restricted Purchases | Casino & Gaming | Financial Services (KYC/AML) | Automotive (Sales, Rentals, Test Drives) | |
| Alberta | |||||
| British Columbia | |||||
| Manitoba | |||||
| New Brunswick | |||||
| Newfoundland & Labrador | |||||
| Northwest Territories | |||||
| Nova Scotia | |||||
| Nunavut | |||||
| Ontario | |||||
| Prince Edward Island | |||||
| Quebec | |||||
| Saskatchewan | |||||
| Yukon | |||||
Legal | Not required, but commonly used | Not required by law | |||
Please note that IDScan.net is not a legal organizations, nor should anything on this page constitute legal guidance. It is meant to be a list of resources and helpful links. Please consult your attorney before making any decisions related to scanning IDs in your province. Detailed information on US ID Scanning Laws can be found here.
