Millions of directors are not fully prepared for identity verification rules, with just 50 working days to go