Ask before scanning where practical, explain why you are collecting information, record the source of permission and respect opt-outs. Requirements vary by organiser, jurisdiction and channel, so treat this as operational guidance and take legal advice for your situation.
Good capture respects the person in front of you. A short question and a clear record of what they agreed to protect both the relationship and your data.
What requirements can depend on
Rules and context
- Event organiser rules
- Registration terms
- Country and region
- Applicable privacy and electronic-communication laws
The interaction
- Communication channel
- Contact type
- Purpose of processing
- Whether the person requested follow-up
Checklist
Recommended practices
- Ask before scanning or collecting information where practical
- Explain why you are collecting it
- Record the source and context of permission
- Respect opt-outs
- Use appropriate privacy notices
- Avoid collecting unnecessary personal information
- Limit access to event data
- Store and transfer data securely
- Define retention and deletion practices
Do not assume that a badge scan equals unlimited marketing permission.
Say it simply
Many teams treat the visitor's acknowledgement as part of the consent record. Event rules and legal requirements vary, so check yours.
Reference
Wording to avoid
| Avoid saying | Say instead |
|---|---|
| Badge scanning is always legal | Requirements vary by event, jurisdiction, data type, channel and purpose |
| Event registration permits every kind of marketing | Check what the organiser terms and the visitor agreed to |
| One consent statement works globally | Review the wording for each region and channel |
| The workflow guarantees compliance | The workflow supports good practice, so review it with legal advice |
Checklist
What to record about permission
- That you asked, and when
- What the person agreed to, such as a follow-up on a specific topic
- How they prefer to be contacted
- Any opt-out or do-not-contact request
- The source, such as badge scan, QR form or conversation
- The privacy notice or wording shown, where one was used
Reference
What staff do and say
| Situation | What to do |
|---|---|
| A visitor asks why you need their details | Explain in one sentence what you will send or discuss, and that they can say no |
| A visitor says do not contact me | Respect it, mark the record and do not add them to marketing |
| A visitor asks you to delete their details | Note the request and pass it to the person who handles data requests |
| Organiser rules restrict what you can do with scan data | Follow the rules and check them before the event |
Requirements vary by event, jurisdiction and channel. Review organiser rules and your own policy, and take legal advice for your situation.
Frequently asked questions
Is it legal to scan trade show badges?
It depends on the organiser rules, the registration terms, the jurisdiction and how you use the data. This is operational guidance, not legal advice, so review event rules and get appropriate legal guidance.
Should you ask permission before scanning a badge?
Asking before scanning is good practice where practical. It builds trust and gives you a record of the context in which the person agreed to be contacted.
Does a badge scan mean the visitor agreed to marketing?
Do not assume so. What the person agreed to depends on the registration terms, what you told them and the rules that apply. Record the source of permission and respect opt-outs.