A virtual currency kiosk operator shall preserve and retain all transaction records of a virtual currency kiosk transaction for no less than 3 years, including, but not limited to:
1. Customer information. The customer's name, address, date of birth and driver's license number;
2. Recordings. Video or other recordings of the transaction; and
3. Biometric data. Any biometric data collected.