A large part of the problem is that companies can pretend to use the information as an ID when actually using it to just get credit history. I wish we could simply pass a law saying that identity verification cannot use SSN, and that one must separately opt in to credit checks than to id verification.