The Registry does not hold the passports
This is the most common misunderstanding. The European registry does not store product data: it holds the unique identifiers, the commodity codes of products intended for release for free circulation, a semantic repository and a register of operations.
It works like a directory linking the product's identifier to the address of the server where the passport actually lives. Your data stays where you published it.