Alternatively, you could request that your customers do third party verification before accepting an application, doesn't solve the privacy issue but does side

Alternatively, you could request that your customers do third party verification before accepting an application, doesn't solve the privacy issue but does side step the responsibility for you, but again this all comes down to contracts and commercials.