School Visitor Screening Requirements, State by State

97% of public schools reported requiring visitors to sign or check in and wear badges, according to National Center for Education Statistics data on school safety practices for the 2021–22 school year. Near-universal adoption. So when a principal or district ops lead goes looking for the school visitor screening requirements that force it, the natural assumption is that a statute is sitting behind that number.

Mostly, one isn’t.

We went through the statutes in five states whose school safety codes are unusually explicit — Texas, Florida, Utah, Virginia, and Wisconsin. What’s in the law is narrower and stranger than the vendor marketing suggests, and the gap matters when you’re writing a procurement spec or answering a school board question. Here’s what’s actually written down.

School Visitor Screening Requirements Come From Three Places, Not One

Ask five districts what their screening rule is and you’ll get five answers, because three separate layers stack on top of each other and nobody labels which layer they’re quoting.

State statute is the thin layer. It tends to cover physical access — locked doors, one entrance, who may be ejected — and it rarely names a technology. State safety-standard rules sit under the statute: assessment tools, walk-through checklists, minimum facility standards published by a state safety center or board of education. Those get specific. District policy is the thick layer, and it’s where “scan every ID” almost always lives.

That ordering explains a lot of confusion. A vendor page saying your state “requires ID scanning” is usually describing a district policy that a few large districts adopted, not a line in the code. Worth checking before you budget against it.

This post summarizes publicly available statutes current as of this writing and is not legal advice. Statutes change, and your district counsel is the right reader for any of this.

What Five States Actually Put in Statute

Texas is the one people misquote most. Texas Education Code § 38.022, added in 2007 and amended in 2023, says a district may require a driver’s license or other government photo ID, may eject someone who refuses when it reasonably appears they have no legitimate reason to be there, and may verify a visitor against the state registry. Every operative verb is permissive. The one mandatory clause is that the board of trustees “shall adopt a policy” for what happens when a visitor is identified as an offender — a policy requirement, not a screening requirement.

Florida went the other direction and got extremely concrete about doors. Florida Statutes § 1006.07(6)(f) defines an “exclusive zone” reachable only through a single point of entry, requires gates into it to stay closed and locked while students are on campus unless actively staffed, and requires classrooms to be locked when occupied. Exceptions have to be documented in the Florida Safe Schools Assessment Tool portal, and the Office of Safe Schools can show up to check. Notice what’s absent: no ID scan, no registry lookup, nothing about the sign-in desk itself.

Utah’s H.B. 40, School Safety Amendments, passed in 2025, reads the same way. Minimum facility standards for every public and private school: limited entry points, video surveillance of entrances while school is in session, internal classroom door locks, exterior cameras. The bill text never uses the word “visitor” and never mentions the sex offender registry. If you’ve seen a compliance guide claiming Utah now mandates scanning IDs against the registry, compare it against the enrolled bill.

The Registry Check Most Districts Assume Is Mandatory

Here’s the part that surprises people: in most states the legal duty points at the offender, not at the school.

Wisconsin Statute § 301.475 says a registered sex offender “may not be on any school premises” unless the school district administrator has been notified of the specific date, time, and place of the visit and of the person’s registered status. The obligation to disclose is the offender’s. Mississippi’s code works on the same notification model. The school’s job is to have someone who receives that notice and a policy for what to do next — which is exactly the “shall adopt a policy” language Texas uses.

Automated screening is still a reasonable thing to buy. Just buy it as a risk decision rather than a compliance one, and go in knowing what the underlying data is. The Department of Justice is blunt about this in the Dru Sjodin National Sex Offender Public Website conditions of use: it doesn’t guarantee the accuracy, completeness, or timeliness of jurisdiction data, and tells users that information may not reflect current residence or employment and that verification is on them. A name-and-DOB match against a public registry is a screen, not a background check.

Registry screening and access denial carry legal exposure — check with district counsel before adopting a policy that turns a match into a refusal of entry.

What the Front Office Has to Produce in an Audit

The screening question that actually gets asked during an inspection isn’t “what did you scan.” It’s “show me.”

Virginia Code § 22.1-279.8 requires every school to conduct an annual safety audit using a standardized walk-through checklist from the Virginia Center for School and Campus Safety, built on crime-prevention-through-environmental-design principles, and to make the results public within 90 days. Each school keeps a copy in the principal’s office. Florida’s version is the Safe Schools Assessment Tool portal, where documented exceptions live and where a compliance visit starts.

So the artifacts that matter are mundane. A written visitor procedure. A log you can search and export when someone asks who was in the building on a Tuesday in March. Badges that show a date, so yesterday’s badge doesn’t work today. If you’re rebuilding that procedure from scratch, our visitor policy template covers the sections auditors look for, and exporting visitor records to a spreadsheet is the step most paper-based offices can’t do at all.

Choosing Visitor Management Software for Schools Against These Rules

Two products are competing for the same budget line and they solve different problems. Know which one your policy actually needs.

The K-12 safety platforms — Raptor is the best-known — lead with registry screening, custody-alert flags, and volunteer background checks. If your district policy mandates automated screening, that’s the category, and we cover the tradeoffs honestly in our review of Raptor visitor management. The other category is the front-office sign-in system: replace the clipboard, print a photo badge, notify the staff member, keep an exportable log. That’s what InstaCheckin does — iPad check-in with visitor photo capture, branded badge printing on a Brother QL label printer, NDA or field-trip waiver signatures collected on the kiosk, host notification by email and SMS, and a cloud log you can filter by date or export to CSV and PDF.

InstaCheckin doesn’t screen against a sex offender registry. Saying so plainly is more useful than a feature matrix, because the wrong pick here is expensive in both directions: districts buy a full safety platform when a policy audit would have shown they needed a sign-in log, or they buy a sign-in app and later discover their board resolution promised registry checks. Read the resolution first. Our fuller walkthrough of visitor management software for schools breaks down the rest of the evaluation, and the school visitor sign-in page shows the kiosk flow. Per-location plans are on the pricing page.

One more thing about the paper logbook, since a surprising number of front offices still run one. It fails the privacy test before it fails the audit: every parent who signs in reads the name, phone number, and business of everyone above them on the page.

FAQ

Is there a federal law requiring schools to screen visitors?

No. There’s no federal statute that tells a school how to check in a visitor. Federal involvement is mostly funding and research — the National Center for Education Statistics tracks what schools do, and grant programs pay for some of it. The operating rules come from your state’s school safety code and your district’s own policy.

Do schools have to check visitors against the sex offender registry?

In most states, no, and the statutory duty usually runs the other way. Wisconsin makes it the registered offender’s obligation to notify the district administrator of the date, time, and place of a visit. Texas permits a district to verify a visitor against the state registry but doesn’t compel it. Where registry screening is required, it’s typically a local board policy.

What does a state school safety audit look at in the front office?

A standardized walk-through checklist, plus evidence that your written procedure is the one you actually follow. Virginia requires the audit annually and makes results public within 90 days. Expect to be asked for the visitor log, the badge procedure, and proof that exterior doors stay locked during the school day.

Does a visitor sign-in log create a FERPA problem?

A log of adults entering the building isn’t a student education record, so it normally sits outside FERPA. The line blurs when an entry names a specific student, like an early-dismissal pickup. Ask your district records officer where that boundary sits for your division rather than guessing. This is not legal advice.

Do private schools follow the same rules?

Sometimes. Utah’s minimum facility standards reach both public and private schools, while Florida’s exclusive-zone rules apply to public and charter schools. Accreditation bodies and insurers often impose their own visitor requirements on private schools regardless of what the state code says.

Start With the Log, Then Decide About Screening

Whatever your state requires, the front office needs one thing before anything else: a record it can search, and a badge that tells a teacher in the hallway who this adult is and who they’re here to see. That part isn’t controversial in any of the five statutes above.

If that’s the gap, start a free trial and set up a kiosk on an iPad you already own. Sign-in, photo badge, host alert, exportable log. Bring the registry question to your board with the statute in hand.