Comment by whiplash451

The regulation lets identity verification companies store identity data for up to three years. The providers typically do it to train machine learning models for fraud detection.