The problem is dealing with software and databases that weren't designed for deleting and anonymization. I do not envy all the developers who are going to have to rewrite crappy legacy code to be compliant.