Becoming a Live Scan provider in California is a two-track process: every person who will roll fingerprints must first earn an individual fingerprint roller certification from the California Department of Justice, and the business itself must then be approved as a Private Service Provider (PSP). The DOJ takes 90 to 120 days to process a complete PSP application, and that clock only starts once every roller at your business already holds an active certificate. Between equipment, background checks, and fees, plan on spending several thousand dollars before you scan your first customer.
Who Can Become a Fingerprint Roller
California Penal Code Section 11102.1 sets the eligibility rules, and they apply to every person who will physically operate the scanner, not just the owner. You must be at least 18, a legal California resident at the time of certification, and able to pass a criminal background check.1Justia. California Penal Code Article 3 Criminal Identification and Statistics 11100-11112
The DOJ evaluates each applicant for honesty, credibility, and integrity. Two categories of criminal history are automatic disqualifiers: any felony conviction, and any conviction for an offense involving moral turpitude, dishonesty, or fraud that relates to your ability to handle fingerprinting responsibilities.1Justia. California Penal Code Article 3 Criminal Identification and Statistics 11100-11112
Law enforcement personnel and state employees who have already been through criminal background investigations and fingerprint rolling training are exempt while performing official duties. Employees of tribal gaming agencies operating under a tribal-state compact also qualify for the exemption. Everyone else needs a certificate before touching a scanner.
Step One: Get Certified as a Fingerprint Roller
This is the step most people underestimate. The DOJ will not approve your PSP application until the business owner, the primary contact person, and every employee who will roll fingerprints holds an active roller certification. The certification runs on its own timeline, so starting here saves months.2State of California – Department of Justice – Office of the Attorney General. Live Scan Operators
The steps must be completed in order:
- Read the DOJ’s Fingerprint Rolling Certification Program Reference Handbook. It covers proper technique, legal obligations, and security requirements, and the application asks you to attest that you’ve read it.
- Complete Form BCIA 8372, the Application for Certification.
- Visit an existing Live Scan location and submit your own fingerprints using a Request for Live Scan Service form (BCIA 8016FP) for the personal background check.
- Pay $74 in certification fees at the Live Scan site: $32 for the California background check, $17 for the FBI check, and a $25 certification fee. All are non-refundable. You’ll also pay a rolling fee to the operator, which varies by location.
- Mail the completed BCIA 8372 to the DOJ’s Fingerprint Rolling Certification Program.
Once the DOJ clears your background check and reviews your application, you’ll receive a Letter of Approval and a certificate that must be displayed at your business.3California Department of Justice. Fingerprint Rolling Certification Program Reference Handbook To start the process, email the DOJ at FPCERT@doj.ca.gov.2State of California – Department of Justice – Office of the Attorney General. Live Scan Operators
Step Two: Buy CJIS-Compliant Equipment
The DOJ only allows connections to its network from devices that meet FBI Criminal Justice Information Services (CJIS) specifications. Non-certified equipment will get your application rejected, so this decision has to happen early. The DOJ publishes a list of approved devices on the Attorney General’s website; consult the current version before buying.
Live Scan hardware is one of the largest startup costs. Industry pricing for compliant systems generally runs $7,000 to $12,000 for the scanner, computer, and software, depending on manufacturer and features.
The DOJ also requires all Live Scan submissions to use Secure File Transfer Protocol (SFTP) or Web Service transmission. Older unsecured file transfer methods are gone, and the DOJ now strongly encourages Web Service submissions routed through the Transaction Router Gateway.4Attorney General. CJIS Information Bulletin 22-03 New Live Scan Submission Requirements Secure File Transfer Protocol FTP or Web Service Transmission Confirm your equipment supports one of these methods before signing a purchase agreement.
Step Three: Apply as a Private Service Provider
With roller certifications in hand and equipment selected, you can begin the PSP application. Start by emailing livescansupport@doj.ca.gov to express interest in becoming a PSP or Live Scan Operator. The DOJ uses this initial contact to send the current application forms and instructions.2State of California – Department of Justice – Office of the Attorney General. Live Scan Operators
Your application package needs to include business ownership documents such as articles of incorporation or partnership agreements, equipment information including model numbers and software versions, and completed background check results for every person associated with the business. You also need to register your business with the California Secretary of State and hold a local business license from your city or county. DOJ certification doesn’t replace standard business registration.
Every field must be signed and dated. Incomplete packages get returned, and the 90-to-120-day processing clock resets when you resubmit. Use a trackable mailing service so you have proof the DOJ received your materials.
Approval Timeline and Public Listing
The DOJ’s published processing time for a complete and accurate PSP application is 90 to 120 days, and that window doesn’t include the time spent getting your roller certification first. Total startup time from first steps to serving customers can stretch to six months or longer.2State of California – Department of Justice – Office of the Attorney General. Live Scan Operators
During review, the DOJ may send a representative to inspect your location. The reviewer verifies that certified equipment is properly installed, that the space provides adequate privacy for applicants being fingerprinted, and that you have secure record storage. Lighting, signage, and controlled access to the work area are also part of the evaluation.
Once approved, the DOJ assigns your business a Private Service Provider identification number that authorizes your equipment to transmit fingerprint data through the state’s network. You can then request to be listed in the Attorney General’s public search of Live Scan sites by emailing livescansupport@doj.ca.gov, and your listing will appear within 30 days.5State of California – Department of Justice – Office of the Attorney General. Live Scan Locations That directory matters for business development, because employers and licensing agencies routinely point applicants to it.
What You Can Charge Customers
Live Scan providers collect two kinds of fees. The first are DOJ and FBI pass-through fees that you simply forward to the state. For a standard background check, that’s $32 for DOJ processing plus $17 for the FBI check, or $49 total. Some background check types carry additional fees; a firearms permit check, for example, adds a $38 firearms eligibility fee, bringing the pass-through to $87.6Bureau of Security and Investigative Services. Criminal History Background Check Requirement
The second is your rolling fee, which is your actual revenue. You set it yourself; California doesn’t cap it. The Attorney General’s public directory displays each provider’s rolling fee, so customers can comparison shop. Most private providers charge $20 to $50 per session, depending on local market conditions and overhead.
Ongoing Compliance After Approval
Approval isn’t the finish line. The DOJ holds providers to strict ongoing obligations around data security and record handling, and mishandling Criminal Offender Record Information (CORI) can cost you your certification.
The core rules are practical. Only authorized personnel with a demonstrated need may access applicant record information, and you cannot release records to anyone outside your authorized staff without proper approval. Your Live Scan terminal and communication lines must remain secure, and only authorized technicians should perform hardware or software maintenance.
Internal records related to Live Scan transactions should be retained per the terms of your DOJ agreement, then securely shredded by authorized personnel.7State of California – Department of Justice – Office of the Attorney General. Frequently Asked Questions – General Keeping records longer than required creates liability; disposing of them early violates your obligations. Either mistake can trigger enforcement action.
The DOJ can audit your site at any time. Treat the security protocols from your initial approval as permanent operating requirements. Providers who let their practices slip between inspections are the ones who lose their authorization.