Collecting the data is already a breach, in my opinion, and should open you up for lawsuits.

When I go to banks or notaries or etc. I sometimes pretend my hand hurts and can't fill out the form, so they type it directly into the computer for me and skip over almost all the fields.

They usually just want name and date of birth, and maybe bank account or credit card info for payments. The entire rest of the form is just data hoarding and should be removed.