One would expect the auditing  firm,  having been granted a Royal Charter,  would use the additional info solely for the purpose it was provided to them,  and wouldn't parse additional first order personal ID info for CIMS or any other politically-oriented data base.  https://privycouncil.independent.gov.uk/royal-charters/chartered-bodies/