I think we can do both. Or at least restrict what a business can do with identification information that is mandatory, such as not being able to use it for marketing purposes or sold, and have it be temporary.