[tialaramex]

I'm not sure why this was voted down?

This is Personal Information and so the data processor must have a specific reason why they need it, and must take appropriate steps to secure it. They can't just capture it "In case we need it later" nor can they just store it haphazardly because it's not valuable to them, or refuse to update it because that's difficult.