Gdpr has a right to deletion within 30 days. Companies have been fined for failing to do so.