Keeping compliant with data protection laws, such as the GDPR, PCI DSS, or information security standards like ISO 27001, requires not only securing data effectively, but also deleting the data when you no longer have a legitimate purpose to store it.