(7)To enable ESMA to conduct the assessment for the purposes of the initial registration, while ensuring appropriate safeguards, personal data relating to applicants for registration as an external reviewer should be kept by external reviewers and ESMA for no longer than five years after that applicant has ceased to perform its function where the applicant has been registered as an external reviewer. Where ESMA has refused to register an applicant external reviewer or where the applicant withdraws its application, personal data relating to that applicant should be kept by ESMA no longer than five years after the refusal of the registration of the applicant or after the withdrawal of the application.