Those aren't mutually exclusive at all. You could both limit the victim's responsibility for identity theft, and prohibit businesses for using the SSAN as a me

Those aren't mutually exclusive at all. You could both limit the victim's responsibility for identity theft, and prohibit businesses for using the SSAN as a means of identification, with a whopping fine attached. > The businesses will automatically stop using mechanisms of identity verification that cause them to lose money. You mean like if they were forced to pay a gigantic fine?