[jamal-kumar]

Essentially because of data retention of someone's identity card being inherent in such a system

[dist-epoch]

But they don't need to retain the data, they only need to set a flag on your account "identity was validated".