The shop might store the data or misuse it. This is already a solved problem. A privately signed identity that can be verified without transferring any of the data using a device the government provides.

But I already said government too much. This is all non-senses. Transactions should not be monitored.