Privacy Concerns with ID Scanning?

Thinking about hitting up a spot, but someone told me they scan IDs. I get why, but am worried about privacy issues. Like these places could get hit by one of those blackmail outfits that take servers hostage until they pay up or dump all the data into the public domain. Are you at all concerned about the privacy risks? Any risk mitigation tips?