Why the sudden need for requiring ID's and a photo of a user holding his ID?

This was not mentioned during the PRE-ICO sale! Users are now suddenly unable to receive their coins unless they give up some privacy. How secure and confidential are those ID's stored?