Want to develop for Malaysia, possibly Asia. Anyway I read the draft and I think there is duplication of properties - `esco:expiryPeriod`. Also there are properties like `Holder's Name` and `Date of Birth`. Is this ok with GDPR?