It seems difficult for any ICO to verify citizenship or residence. One could provide a fake name, address or phone number.