Data of this sort cannot be handled safely. When it is politically popular to do so, it will be leaked by internal or external actors. The solution is simple and effective, don't make databases, only hand out ID's. The public and government has no right to know the personal ongoings of everyone's lives.