Theoretically PADI, SSI, CMAS, etc. could do it: each knows how many people it certified, and has their ids, and also has the numbers of their affiliated dive shops. Said shops, when organizing dies typically record the agency, member id, and (self-reported) dive count of the participants. The...