Comment by m463

It could also be that KYC is an immature rule that says "the data must be collected".

Maybe a more nuanced future KYC rule might need to both collect and protect customer data.