> The information includes names, addresses, birth dates, social insurance numbers, email addresses and information about transaction habits.

It's starting to look downright irresponsible to regard such information as private these days.

As such, it should be considered irresponsible to base any portion of a verification protocol on that information.