We are not equipped to store that level of sensitive information
For what it's worth, the legislation seems pretty clear on this one point (despite being unbelievably unclear on just about every other point):
- Government-issued ID cannot be the only way a person is able to verify themselves
- If Government-issued ID is used, it cannot be stored past the length of time it takes to verify
How that's going to play out in practice is anybody's guess at this point.