Reasons the Credit Card/Birth cert or other requirement for personal data are a major problem:

Where are you going to store the info?

If on an IT (computer) system is it certified against unauthorized intrusion?

If in a safe does it meet bank standards?

How long?

How much liability insurance are you going to carry for loss of the data or security breach of the data? (you can do a lot with a birth cert or CC#)

How are you going to notify the person that the data has been compromised if it happens?