"In the bar's system, staff had added notes that would pop up when his ID was scanned"

When a person's ID is scanned their "private" information shows up. All these employees are doing is adding things in a notes field like "this person is trouble" or "they're no longer allowed in here" or whatever. I don't see a problem with that and apparently neither does the Commonwealth of Pennsylvania.