I also wonder if it stops them from collecting it. Also, what are the legal requirements if a customer asks their data to be removed?

Still, I'm not giving up a plausible solution because potentially it's only a partial solution.