Oppose Online ID Collection Mandates That Schedule the Next Data Breach

Oppose any legislation that expands mandatory online identity collection. Every new law requiring platforms to collect Social Security numbers, dates of birth, and government ID is a law that schedules another data breach and another innocent person's prosecution. Amanda Smith, a 47-year-old Pennsylvania woman, is facing up to six years in prison for a Facebook Marketplace scam she did not commit. A fraudster opened a Cash App account using her Social Security number and date of birth, likely stolen in the 2024 National Public Data breach, which exposed Social Security numbers, names, dates of birth, phone numbers, and addresses for millions of people. The address, phone number, device, and carrier on the account were not hers. None of that stopped police from arresting her, because the Know Your Customer check matched her stolen data and that was enough. This is the system working exactly as designed. KYC rules require platforms to collect sensitive data, that data leaks, and then the leaked data becomes evidence against the victim. Smith's private investigator put it plainly: the system confuses matching a name with data against actually identifying who controlled an account. Expanding these mandates will not reduce fraud. It will multiply the number of people whose stolen identities land them in handcuffs. Vote against any bill that adds to the pile of platforms required to collect and store this data.