Some states have even banned the keeping of identifying data in purchase records at the individual stores, too.