It's lazy requirements gathering and taking shortcuts that gave them this. Or: and I will use bad language here, some idiot developer stores this in a document

It's lazy requirements gathering and taking shortcuts that gave them this. Or: and I will use bad language here, some idiot developer stores this in a document DB and has a field for name & license number. Or: GDPR doesn't allow devs or makes them too scared to capture PII information on account sign-up. We had this exact same crap in South Africa when the government went out on a tender and awarded a DEI company the project to do a license renewal booking system.