Do Dispensaries Scan Your ID in Minnesota? What a Retailer May Keep

Introduction

You hand over a card at the counter. The employee looks at it, and at some stores a scanner beeps. Then the card comes back and the sale goes on. It's a fair question what happens to the information in between.

This guide covers that data side of the age check: what Minnesota law requires, whether it requires scanning, what a retailer may collect, who the data cannot be shared with, and the one situation where a retailer may keep an ID. If this is your first time in a store, your first visit to a Minnesota dispensary walks through the whole trip. Everything here is for adults 21 and older.

What the law requires at the counter

An age check before every sale

Under Minn. Stat. 342.27, subd. 4, an employee must verify that the customer is at least 21 years of age before a sale. The Office of Cannabis Management's retail rule, Minn. R. 9810.2501, repeats the duty: a retailer must confirm that an individual in the retail area is 21 or older, using a form of identification the statute allows.

The only IDs that count

The statute says proof of age may be established only by one of these:

• a valid driver's license or identification card issued by Minnesota, another state, or a province of Canada
• a valid Tribal identification card
• a valid passport issued by the United States
• a valid instructional permit that includes a photograph and date of birth
• for a foreign national, a valid passport

A photo of an ID on a phone is not on that list. Bring the physical document.

Does the law require a scan?

Not that we found. The retail rule requires a point-of-sale system that is validated and integrated with the statewide monitoring system. That is a requirement about recording sales, not about reading your ID. Neither the statute nor the rule says an ID must be scanned.

So the practical answer to "do dispensaries scan your ID in Minnesota?" is that the law requires the check, and how a store performs it is a matter of that store's own procedure. Some employees read the card by eye. Others may use a scanner. If you want to know what a particular store does, ask at the counter or check its posted privacy procedure.

What a retailer may collect and use

The retail rule sets a limit that applies whatever method a store uses. A retailer must collect only the information necessary to complete the transaction, and may use that information only for the purpose of completing the transaction. The rule also requires a standard operating procedure for data security and privacy, and that procedure has to cover any third party the retailer contracts with for online sales.

In plain terms: the purpose of the data is the sale. Using the same information for something unrelated, such as a mailing list, is outside what the rule describes.

Online and phone orders: what gets collected

Orders placed ahead are different because the store needs to know who is picking up. The rule says an online or phone order must include the customer's name, address, phone number, email address, and date of birth. Before handing over the order in the store, the retailer verifies your name and that you are 21 or older on an ID the statute allows. Our guide to ordering online for in-store pickup covers how that flow works.

Customer data and federal agencies

Minnesota puts a specific limit on sharing. Under Minn. Stat. 342.23, subd. 6, cannabis businesses and hemp businesses must not share data on retail or wholesale customers with any federal agency, federal department, or federal entity unless specifically ordered by a state or federal court.

The state regulator treats customer-identifying data the same way. The Office of Cannabis Management's application data page lists data identifying the retail or wholesale customers of a cannabis business as an exception to what it publishes.

When a retailer may keep an ID

Getting your ID handed back is the normal outcome. The statute names one exception. Under subd. 4(c), a retailer may seize an identification listed in the statute if it has reasonable grounds to believe the identification has been altered or falsified. A seized ID must then be delivered to a law enforcement agency within 24 hours.

The wording is narrow. It turns on reasonable grounds that the document is altered or falsified, not on a store's preference to hold a card. We did not find a provision that lets a retailer keep a valid ID for any other reason.

What the rules do not say

Two gaps are worth knowing about. First, the retail rule reviewed for this article sets no retention period for customer information, so it does not tell you how many days or years a store may keep what it collects. Second, it does not say whether a store may store a scanned image of your ID. The limits it does state are the ones above: collect only what the transaction needs, and use it only for the transaction.

Because the rule leaves the specifics to each store's privacy procedure, the best source for those details is the store itself. The same goes for cash and debit questions; see how payment works at a Minnesota dispensary. Rules can change, so confirm current text on the Office of Cannabis Management site or the Minnesota Revisor's site before relying on any detail here. For store policy questions, our FAQ page is a good starting point.

Bottom line

Every sale starts with a 21-and-older check against a short list of valid IDs. The law does not require a scan, limits what a retailer collects to what the sale needs, bars sharing customer data with federal agencies absent a court order, and lets a retailer keep an ID only when it has reasonable grounds to think it is altered or falsified. What it does not state is how long a store may keep what it collects, so ask the store directly.

Frequently Asked Questions

Do Minnesota dispensaries scan your ID?

State law requires the employee to verify you are 21 or older using a listed ID. The retail rule requires a point-of-sale system tied to the statewide monitoring system but does not require electronic scanning of IDs. Whether a given store scans is that store's practice.

Can a dispensary keep my ID?

Only in one case the statute names: a retailer may seize an ID it has reasonable grounds to believe is altered or falsified, and must deliver it to law enforcement within 24 hours.

Can a dispensary share my information with federal agencies?

Cannabis businesses must not share data on retail customers with any federal agency, department, or entity unless specifically ordered by a state or federal court (Minn. Stat. 342.23, subd. 6).

How long can a retailer keep customer information?

The retail rule reviewed for this article sets no retention period. It limits collection to what is necessary to complete the transaction and use to that purpose. Ask the store about its privacy procedure.

For adults 21 and older only. Cannabis products have not been analyzed or approved by the FDA and are not intended to diagnose, treat, cure, or prevent any disease. Keep out of reach of children. Do not operate a vehicle or machinery after use. This article is general information about products sold in Minnesota, not medical advice; talk to a licensed clinician about your health.