[yenda]

Or they remove them from the dataset in batches every X months and retrain. You have a few months to comply to gdpr requests

[wongarsu]

Especially if you can demonstrate that you can't reasonably comply any faster. Combine this with a naïve filter on model outputs for the intervening period and you have a solution that should satisfy both spirit and letter of the law.