[HowardStark]

Not that anyone is disagreeing, but it bears repeating: This is a lack of any real pressure from regulators, not a technical challenge. Or rather, there may be technical challenges but they absolutely can be overcome, and aren’t being tackled right now very simply because the business doesn’t care. As is so often the case, the business must be made to care.

[Terr_]

> This is a lack of any real pressure from regulators, not a technical challenge.

Also, I think it's easy to misstep if we start thinking of it as a problem of "better regulators", since some of the blame lies on deeper legal-aspects around (data-)ownership, contracts, and what what happens in bankruptcies.

Even a company with great intentions may have difficulty ensuring the promises they made are kept long-term, especially if a bankruptcy court voids those promises in the name of repaying creditors.

[Muromec]

GDPR mandates the ability to delete the data.

[LegionMammal978]

Not from all backups, or so I've heard.

[whalesalad]

Disagree. Waste of time and resources. Let the data sit and rot, who cares. We are humans not Germans.