They should not be keeping your passport DATA - without your "consent". Which here means "You gave us your passport details, so you obviously consented".
But since that was supposed to be "fully enforced" on the 1st June last year and has yet to be, I wouldn't worry about it.
They've probably already leaked your passport data all over the interwebs anyway.
![]()