Design objective DO6: Erasure of personal data after storage obligation
An ICO investor must have the opportunity to ask the KYC-provider and emitter to delete any records of investment progress once the five-year storage obligation (see requirement 5) is over. Data that is stored locally in the KYC-provider's and emitters database must be deleted.
Source paper
This design objective is proposed by Know-Your-Customer (KYC) Requirements for Initial Coin Offerings: Toward Designing a Compliant-by-Design KYC-System Based on Blockchain Technology (Nadine Kathrin Ostern, Johannes Riedel, 2021).