The data doesn't need to be kept though. It can be requested, checked, verified and erased.