(a) A cannabis establishment issued a license pursuant to RERACA or an agent or employee of such licensee may require any person whose age is in question to have such person’s photograph be taken by, and a photocopy of such person’s driver’s license or identity card issued in accordance with the provisions of § 1-1h be made by, such licensee, agent or employee as a condition of selling or delivering cannabis or cannabis products to such person.

(b) No licensee or agent or employee of a licensee shall use a photograph taken or a photocopy made pursuant to subsection (a) of this section for a purpose other than the purpose specified in said subsection.

(c) No licensee or agent or employee of a licensee shall sell or otherwise disseminate a photograph taken or a photocopy made pursuant to subsection (a) of this section, or any information derived from such photograph or photocopy, to any third party for any purpose including, but not limited to, any marketing, advertising or promotional activities, except that a licensee or an agent or employee of a licensee may release such photograph, photocopy or information pursuant to a court order.

(d) In any prosecution of a licensee or an agent or employee of a licensee for selling or delivering cannabis to a person under twenty-one years of age in violation of § 21a-421aaa, or for providing cannabis to a person under twenty-one years of age in violation of § 21a-421ddd, it shall be an affirmative defense that such licensee, agent or employee sold or delivered cannabis to such person in good faith and in reasonable reliance upon the identification presented by such person and, pursuant to subsection (a) of this section, photographed the person and made a photocopy of such identification. In support of such defense, such licensee, agent or employee may introduce evidence of such photograph and photocopy.

(e) The Commissioner of Consumer Protection may require a cannabis establishment to use an online age verification system.