Not an advocate, but you just run the script to clean the data (as ordinary events).

It's not really different than handling regular backups. You don't wipe them, just guard them well until they expire.