> Many systems don't actually delete data; they set a "deleted" flag that often causes the system to behave as if it did from the customer's point of view, but the data stays in the database for perpetuity.

> That means in all likelihood it is still there, and may actually still be being served to other users.

Thank goodness things like CCPA will change this.