One simple “solution” might be to say that if you’re using BSD as the basis for a system that needs to comply with such laws, it needs to use LDAP for interactive user accounts since that allows for storing and retrieving that additional data.
-- Chris
