At least in the EU there is a regulatory obligation to design your backup system such that data can (eventually) be deleted if the user so requests.

Fortunately there is no strict time limit on completing this process so a design that looks like "and after X months it will have aged out of our backups" appears to be considered reasonable. You are still responsible for making sure your backups are safely destroyed.