In a project sometimes it is necessary for kyc, although not all of them, I think if what is needed is personal data such as ID card, it is not the most important problem for the participants' personal data to be protected, as long as the data needed is needed for participants.