Overview of Vermont ID scanning laws
Vermont has 5 laws which we consider relevant to ID verification, in addition to other laws which may related to age verification, identity verification, KYC, privacy, and biometrics.
Can you scan IDs in Vermont?
Yes. Vermont law does not regulate a business’s practice of scanning IDs or retaining information obtained from a scan.
There are some instances in which merchants are required to record information related to identity, such as sale of controlled substances and scrap metal recycling. ID scanning can improve the ease and accuracy of record keeping.
Can you save data from a scanned ID in Vermont?
Yes. There are no current laws which limit or restrict saving data from a scanned ID in Vermont.
Does Vermont offer affirmative defense for ID scanning?
No. Vermont has no affirmative defense laws related to ID scanning.
What types of IDs does Vermont issue?
Vermont issues drivers licenses and state IDs, including REAL ID.
Individual Vermont ID verification laws
Age verification for alcohol sales
Vermont requires that businesses verify purchasers are at least 21 years old, but does not require electronic scanning or verification for alcohol sales.
Age verification for tobacco sales
Vermont requires that businesses verify purchasers are at least 21 years old, but does not require electronic scanning or verification for tobacco sales.
ID scanning for scrap yards
Vermont requires that businesses verify purchasers are at least 21 years old, but does not require electronic scanning or verification for cannabis sales.
Record keeping for scrap metal
A scrap metal processor must verify the seller’s government-issued ID and record the seller’s full name, address, and date of birth.
Record keeping for regulated drugs
Prior to completing a sale of regulated drugs, the purchaser’s name, address, and ID number must be recorded in the electronic registry system.
Data privacy laws in Vermont
Vermont does not currently have any data privacy laws. The Vermont Data Privacy Act was passed in 2024 but vetoed by the Governor over concerns that the bill was too strict and would be an outlier compared to other states’ data privacy regulations.
