The right to request deletion of data is already mandated in current laws, GDPR doesn't change much in that regard. The hard part is actually enforcing it, and

The right to request deletion of data is already mandated in current laws, GDPR doesn't change much in that regard. The hard part is actually enforcing it, and assessing compliance.