This may be a stupid idea and it is outside my expertise (IANAL): Would legally classifying identity information as intellectual property help? I don't know the case law around identity as private property but I would imagine requiring someone to enter into a legally binding contract just to enter a store would kill efforts like these pretty fast.