Again, deletion as in an actual destructive process isn't required by any EU regulation.
That’s an interesting interpretation, because when I asked the ULD, they had quite a different interpretation of that.
The data can be deleted or anonymised, and the deletion can also be soft, as long as no one can query your data specifically no one really cares how it's stored.
https://uk.practicallaw.thomsonreuters.com/3-502-4080?transi...
This is not something new and surprising, this has been long discussed.