encrypt identity data or you cannot have it

Encrypt IT.

The government, who are the folks mandating this business, should be stepping up and telling those who collect our identity data that they MUST encrypt it AND that de-encryption and access to the data may ONLY be lawful when the de-encryption password is supplied BY THE CITIZEN DIRECTLY.