(5)To enable ESMA to assess the notifications of material changes in the information provided for registration as an external reviewer, while ensuring proper safeguards, personal data regarding external reviewers should be retained by those external reviewers and ESMA for no longer than five years after the external reviewer has ceased to perform its function.