Good point, here's an example: EU VAT, which obliges companies selling digital goods in Europe to store customer and transaction details for 10 years.

https://www.gov.uk/guidance/register-and-use-the-vat-mini-on...