Except there are a lot of people (myself included) who see the handling of "identity theft" as banks and credit agencies trying to pass the buck for their own poor approaches to security and verification.
Google does something much like this - but without regulation or clear appeal process.