CBI Checks, aren't they supposed to be purged?

[DeusExMachina]

I believe the 4473s are supposed to be kept by the vendor for 30 years

I think it depends on the locality. There's also if the shop goes out of business, they submit all 4473s to the ATF who keeps them forever.