How about a licence for personal info

Collect and store verified accurate PI via a secure third party collector. Those wanting to use the data wouldn't be able to actually access the raw data but simply interogate it. Individuals and/or companies etc licence their PI to the information holding agency for named purposes and/or a limited time.

Of course - thats all a bit organised and logical for web 2.0