The government wants to keep our personal data safe? The most important measure to take is obviously to keep our data out of the government's hands.

Suppose cigs could only be sold to people presenting an ID card.

First this implies that EVERY small shop in the land has a ID card reader as each card must be validated to prevent fakes from being accepted.

Second, as ID cards need not be carried, what does the shop do when someone who is obviously old enough to buy cigs but doesn't have a card.

Does this idot government expect the shop to lose the sale?