There are exemptions to GDPR data deletion for several record keeping or technical reasons. It's not got the kind of teeth that people think it does. It's not an instant and full removal. I've done some data deletion requests for my company so I've had to look it up and even something as simple as maintaining the integrity of backups is an exemption. The data might be removed from the live DB, but will still exist in any backups that included it. And, as was mentioned, maintaining the integrity of financial transaction records for FATF and AML compliance.
|