Is it common practice to take a copy of the driver's CDL upon checking in at the facility?

Is it common practice to take a copy of the driver's CDL upon checking in at the facility? I can imagine this could be a good food defense measure, but is it necessary under any GFSI code? Would the company be responsible for any type of data breach and information stolen if the driver's CDL was kept on your servers?

A. Not common practice.

B. If you make a copy of anyone's ID your company is responsible for storage of that information and liable should anything go wrong.

It may be required for firms that provide food for US troops.

My company verifies, does not copy, the driver has a valid CDL which is more about liability of the load than a food safety standard.  No valid CDL no load.  What is the purpose of retaining a copy of that information?