Search results

... and they must have a good, stated reason to keep it (under GDPR). If they've used it to check ID, then I see no reason why they should keep the originals. If they're arguing that it'll save time next time you apply through them, then it's a specious argument under GDPR, and would not be allowed.

I hate to disagree with people but I think GDPR does have a lot to say about this situation. GDPR is about safe storage but an awful lot more besides. Firstly, they must say in a data privacy policy what they'll do with this information. They have to have a good reason to keep it and a policy to...