The problem is that your data is saved by default and almost never deleted. The rental desk needs to only verify the license — nothing in that transaction requires keeping a scan forever. But storage costs nothing and your data is stored forever to hacker's delight. Unfortunately you can't prevent your data leakage, you can only punish them legally
