> no real way

The commissioner found this to not be the case. From the article: "There were other less privacy intrusive methods available to Kmart to address refund fraud."