If the content has been deleted then they don't have to give it to them. Backups aren't covered by GDPR. > So, what are the alternatives? According to France’s

If the content has been deleted then they don't have to give it to them. Backups aren't covered by GDPR. > So, what are the alternatives? According to France’s GDPR supervisory authority, CNIL, organisations don’t have to delete backups when complying with the right to erasure. Nonetheless, they must clearly explain to the data subject that backups will be kept for a specified length of time (outlined in your retention policy). It's talking about right to erasure, but it would apply for requests for personal information. They don't have to crawl through their backups for you, only the current data.