Depending on your industry, or your global customer requirements, you might have to have an audit that shows that you have such procedures in place. If you are

Depending on your industry, or your global customer requirements, you might have to have an audit that shows that you have such procedures in place. If you are small, don't get breached, and attest that you have done the deletion.