Is it expected behavior that the sensitive information is wiped out after a merge of an external app

Content

Scenario:

• Contractor applied as external
• Completed sensitive information
• Record merged with contractor record (which includes the data on the person record)
• Sensitive information in ORC wiped out 

This will negatively impact background and I9, wondering if this is working as expected and we need to manually re-add it or if it should not have been wiped out.