People who sell this data need to have a verification system, and they don't. The enforcement is lax.