What information/id/bioscan requirements are there?
According to
their website, if you're transacting less than $3,000 worth of BTC, it would appear they only require SMS verification, which isn't ridiculous, it's easy to bypass if you don't have a phone or don't want to use your own.
However, they also state here under the "KYC Compliance" tab, that additional verification options can enabled and configured by the operator.
So basically it depends on the decisions of whoever owns the ATM.
This is essentially true for any bitcoin ATM. It is up to the operator to determine how what KYC/AML steps they wish to take. If they do not use enough verifications then they would potentially be liable for not fully complying with the law, but it is their decision.
I would think the OP can give some insight as to what KYC steps were taken in his situation.