Once a business is legally registered, all of its information can be found in government agencies where they got their legal status to do business. I am sure those data can be retrieved by anyone asking for it. Now, what we should be worrying are illegal firms pretending to be legal and have more chance of dealing with the information from their customers not accordance to the law existing to protect data misuse. However, I think the idea of KYP has no chance of progressing so it is all up to us to do our due diligence and use our right to choose the providers whom we think are behaving well, though admittedly that can be a difficult one to determine because even famous names online are also mismanaging data of their own customers and users (remember Facebook?). Data gathering, handling and management will always be an issue all because we are already in the data era and data can be a good mine for money and can have big potential economic power one can use well or abuse.