An article from the Boss JK, page-5

Hotmix,
My understanding is that the the GDPR means that companies while on one hand are obligated to collect AML PSD2 data etc, they may be requested to delete customer data for privacy reasons too. As controlled by the customer.

So does this mean that ISX could hold a data bank of both regulated data and unregulated data. When unregulated data is requested to be forgotten as part of the privacy legislation, the AML PSD2 data is retained allowing companies to comply with all legislation.

Is that how you see it?