This has been bugging me to no end.

Investors require personal information of the business during IPO.. If the business is in the US, then it is already breaking the SEC laws. Do investors know this?