An image reading apparatus includes: a reading unit; a memory interface unit; a permission information obtaining unit; a permission determining unit; and a data recording unit. The reading unit reads an image. An external memory is removably connected to the memory interface unit and stores permission information. The permission information obtaining unit is configured to obtain the permission information from the external memory. The permission determining unit is configured to determine whether the obtained permission information is valid. The data recording unit is configured to record data corresponding to the image on the external memory connected to the memory interface unit if the obtained permission information is valid.