When you order age-restricted products like alcohol, DoorDash may collect and process your government-issued ID and signature. The policy acknowledges this information is treated as sensitive personal data in some states and countries.
This analysis describes what DoorDash's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy identifies government-issued identification and signatures as potentially sensitive personal information and states that consent will be obtained where legally required, but does not specify in detail how consent is obtained or how long this data is retained.
Interpretive note: The policy states consent is obtained where legally required but does not specify the consent mechanism, which makes independent verification of compliance with jurisdiction-specific sensitive data consent requirements uncertain.
If you order alcohol or other age-restricted items, DoorDash may collect and process your government-issued ID document and signature, which the policy classifies as sensitive personal information in some jurisdictions. The policy states this data is used for fraud prevention, age verification, and legal compliance, and is not used to infer personal characteristics.
How other platforms handle this
to withdraw your consent to our processing of your data (where such processing is based on consent)
Request Restriction or Object to Processing of your information.
we may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it.
"Identification Documentation and Signature for Age-Restricted Products, including driver's license or other government issued identification documents, which we may process in limited circumstances such as an order for an age-restricted product (such as alcohol) or other products that require age and/or identity verification and for legal and regulatory compliance. Some of the information identified above that you choose to provide us (specifically, government issued identification and your signature, which we receive when we verify age and identity and the authenticity of a submitted government issued ID for certain orders (such as alcohol orders) to prevent fraud and demonstrate legal and regulatory compliance and precise location information, which we receive to facilitate deliveries and certain content, features and functionality within our Services), may be considered sensitive Personal Information under the laws of some jurisdictions.Excerpt from DoorDash's Privacy Policy
REGULATORY LANDSCAPE: Government-issued identification data is classified as sensitive personal information under the CCPA and CPRA, Colorado Privacy Act, Connecticut Data Privacy Act, and Virginia CDPA.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The policy identifies government-issued identification and signatures as potentially sensitive personal information and states that consent will be obtained where legally required, but does not specify in detail how consent is obtained or how long this data is retained.
If you order alcohol or other age-restricted items, DoorDash may collect and process your government-issued ID document and signature, which the policy classifies as sensitive personal information in some jurisdictions. The policy states this data is used for fraud prevention, age verification, and legal compliance, and is not used to infer personal characteristics.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by DoorDash.