This sounds great. However, my largest concern would definitely be security of personal information. How can you assure people that the proper security measures will be taken?
if you're concerned about security -- scan it with your antivirus, and disconnect your computer from the internet while playing. none of the information *should* leave your computer. Alternately, you can just put in a phony social security number, and edit it before you actually mail anything in.
A good one is the most abused SSN of all time. The SSA actually has a whole page with the story behind it, and it's a pretty interesting read. Needless to say, that number isn't going to be used anytime soon, if ever again.