I absolutely love the idea of imposing a cost for holding personal data. It should be an expensive, carefully weighed decision whether anyone's data is kept for any longer than absolutely necessary.

The only incentive companies generally respond to is financial, that's where we need to impact them to make them think.

(Yes, some companies do try to do right, but they are sadly outnumbered. So far.)