New laws in England and Wales let pubs, bars, off-licences and nightclubs check a customer’s age with digital ID and biometric face scans, the Guardian reports. Old-style plastic cards will still be accepted.
Key takeaways
- The Guardian reports that new laws coming into force this week give pubs, off-licences, nightclubs and restaurants in England and Wales the right to use biometric scanning technology to confirm that customers are over 18.
- Customers will be able to download software that scans their face into their own phone and generates a QR code proving their age from a stored proof of age, according to the Guardian’s account.
- Physical documents are not being withdrawn: the Guardian reports that old-style plastic IDs will still be allowed alongside the new digital methods.
- The change is described as part of a wider government push to digitise age verification for alcohol sales, and other technologies remain under consideration, including a device that scans the veins in a drinker’s finger.
- Much of the operational detail — how quickly venues will adopt the technology, what it will cost them and how the systems will be audited — is not set out in the reporting available here.
What has actually changed in pubs and bars
Until now, proving your age at a licensed premises in England and Wales has been a physical transaction: you hand over a passport, a driving licence or a proof-of-age card, and a member of staff looks at the photograph, the date of birth and the security features, then makes a judgement.
What the new laws do, according to the Guardian, is give licensed businesses the legal right to accept a digital alternative and to use biometric scanning technology to carry out the check. The version described in the reporting works from the customer’s own phone: software scans the person’s face, and the device generates a QR code that proves their age on the basis of a proof of age already stored on the handset.
Two things are worth separating out. The first is the credential — the underlying evidence that the person is over 18. The second is the check — the moment at the door or the till when that evidence is presented and confirmed. The new rules change what counts as an acceptable credential and what technology may be used to verify it. They do not, on the reporting available, change the underlying requirement that alcohol must not be sold to under-18s.
Why this is in the news this week
The trigger is timing. The Guardian reports that the laws come into force this week, which converts a policy intention into something a licensee can lawfully act on. Before a commencement date, digital credentials are a pilot or a proposal; afterwards, they are an option a business can put on its counter.
The second reason is scope. Age verification online — for pornography, gambling or alcohol delivery — has been debated for years. Extending digital and biometric verification into the physical world, at the point where a drink is actually bought, moves the technology from a screen a person uses alone at home to a public interaction with staff and queues behind them.
The third is direction of travel. The Guardian frames the alcohol measures as part of a broader government effort to digitise age verification, and notes that further technologies are being considered rather than adopted, among them finger vein scanning. That signals that this week’s change is a stage in a longer process rather than a settled end point. What that process will ultimately cover is not stated in the material available.
What digital ID means, for a newcomer
“Digital ID” is a loose phrase, and the loose usage causes much of the confusion in public debate. In the form described here, it is not an identity card issued by the state and carried on a chip. It is a verified claim — in this case, “this person is over 18” — that has been established once and can then be presented repeatedly.
The QR code is simply the carrier. It is a way of passing a small piece of data to a reader quickly and without typing. On its own a QR code proves nothing; what matters is what it points to and whether the checking device can confirm that the claim behind it is genuine and current.
The biometric element solves a different problem: binding. A card can be borrowed; a photograph can belong to an older sibling. A face scan is intended to confirm that the person standing at the bar is the person the credential was issued to. That is the argument made for biometrics in this setting. Whether it works reliably across every face, every lighting condition and every crowded doorway is a separate question, addressed below.
Who is affected, and how
Younger drinkers are the most obvious group. In practice, age checks fall on everyone who looks under the threshold a venue applies, which in most cases means people well into their twenties. For them, the change is an added option rather than a new obligation, because the Guardian reports that plastic IDs remain acceptable.
Licensees and their staff are affected differently. Door staff and till operators carry the legal and commercial risk of an underage sale, so any technology that produces a clearer, more defensible answer has obvious appeal. Against that sits cost, training, maintenance and the awkwardness of a device that fails during a busy Saturday night.
There is also a group defined by exclusion: people without a suitable smartphone, people whose phone has run out of battery, visitors from abroad, and anyone who does not wish to have their face scanned. Because physical documents remain valid, these customers are not locked out — but that protection depends on plastic ID continuing to be accepted in future, which the reporting does not guarantee beyond the present arrangements.
Where informed people disagree
The disagreement is not mainly about whether age checks should happen; it is about what a check should require you to reveal and what infrastructure it builds.
Supporters of phone-held credentials argue they can be more private than a driving licence, because a well-designed system can confirm “over 18” without disclosing a name, an address or a full date of birth. Handing a bouncer a licence reveals far more than the single fact in question.
Critics make two counter-arguments. The first is accuracy and fairness: facial recognition systems have historically performed unevenly across different groups, and a false rejection at a bar is a public, embarrassing event with no easy appeal. The second is function creep — the concern that normalising identity scans for alcohol makes it easier to extend them to other everyday transactions later.
A third strand of the argument concerns governance rather than technology: who holds the data, how long it is kept, whether images are processed on the device or sent elsewhere, and who audits the answer. The reporting available here does not set out those specifications, and they are the details on which informed assessments will ultimately turn.
What it means in practice
For a customer, the practical change is modest: download the software, complete the face scan once, and present a QR code instead of a card. Nothing in the reporting suggests a drinker must do this. Refusal of service remains at the venue’s discretion, as it always has been, and a member of staff who is not satisfied can still decline a sale.
For a business, the calculation is more involved. Adopting biometric verification means buying or licensing equipment, training staff to use it and to handle failures gracefully, and thinking hard about data protection, since biometric information used to identify someone is treated as particularly sensitive under UK data protection law. It also means planning a fallback: any venue relying solely on a scanner needs a process for when the scanner is down.
For the wider sector, the significant point is optionality. This is a permission, not a mandate. Adoption will therefore be shaped by whether the technology reduces risk and queue times enough to justify its cost.
What to watch next
Four things will show whether this becomes normal or stays niche. First, uptake: whether large pub groups and supermarket off-licences roll the technology out, or whether it remains confined to nightclubs with existing door systems.
Second, the additional technologies. The Guardian reports that finger vein scanning is among the options under consideration, which is a materially different proposition from a face scan — it requires dedicated hardware at the point of sale rather than software on a customer’s own phone.
Third, the evidence base. Independent testing of error rates, and data on how often checks fail and for whom, will determine whether early confidence survives contact with real doorways.
Fourth, scope. Alcohol is the current application, but the underlying credential is general purpose. Whether the same proof of age is later used for other age-restricted goods and services is not stated in the reporting, and is the question most likely to shape the public argument.
Frequently asked questions
Do I still need a physical ID card to buy alcohol?
No. The Guardian reports that old-style plastic IDs will continue to be allowed alongside the new digital options, so a passport, driving licence or proof-of-age card should still work as it does today. The digital route is presented as an additional way to prove you are over 18, not a replacement. Whether individual venues choose to accept one, the other or both in practice is up to them.
How does the phone-based age check actually work?
According to the Guardian, a customer downloads software that scans their face into their own phone. The phone then generates a QR code that proves their age, based on a proof of age already stored on the device. The face scan links the credential to the person presenting it, and the QR code is the means of passing that confirmation to whoever is checking. Further technical specifications are not set out in the reporting.
Which venues can use biometric age scanning?
The Guardian reports that the new laws give pubs, off-licences, nightclubs and restaurants in England and Wales the right to use biometric scanning technology to confirm customers are over 18. It is a permission rather than a requirement, so individual businesses decide whether to adopt it. The reporting does not indicate how many venues are expected to take it up, or over what timescale adoption might happen.
Is my face stored somewhere when I am scanned?
The reporting available describes software that scans a face into the customer’s own phone, which suggests the credential sits on the handset rather than being handed to the venue. Beyond that, the detailed data handling — retention periods, where processing occurs and who can access records — is not specified in the material here. Biometric data used to identify a person is treated as especially sensitive under UK data protection law.
What is finger vein scanning and is it being used now?
Finger vein scanning reads the pattern of blood vessels beneath the skin of a finger, which is difficult to observe or copy from a distance. The Guardian describes a device of this kind as being among the technologies under consideration as part of the government’s push to digitise age verification for alcohol sales. On that account it is a possibility rather than something in force this week.
Does this apply across the whole of the UK?
The reporting refers to England and Wales. Licensing is handled separately in Scotland and Northern Ireland, so arrangements there are not covered by what is described. The material available does not say whether equivalent measures are planned elsewhere in the UK, and it would be wrong to assume that a system accepted in an English pub is automatically valid in another part of the country.
Sources and further reading
- The Guardian — business and technology reporting on the new age verification laws for licensed premises in England and Wales, the source of the specific claims summarised here.
- UK government publications on digital identity and age verification — the primary place to find the legal text and any accompanying guidance for businesses.
- The Information Commissioner’s Office — the UK regulator whose guidance covers biometric data and data protection impact assessments for facial recognition systems.
- Licensing and hospitality trade bodies — useful for how venues, door staff and retailers are interpreting the change operationally.
Surfaced from the rss:guardian_tech signal “digital age verification rollout”. AI-assisted draft, editorially reviewed.
