Hacker News Reader

why would the GDPR end that? This is still a legitimate ask and they can do that legally.

Essentially because of data retention of someone's identity card being inherent in such a system

But they don't need to retain the data, they only need to set a flag on your account "identity was validated".