I always wonder with these types of "your personal data has been deleted", especially wrt to nightly and weekly backups. If you've been "in the system" for a wh

I always wonder with these types of "your personal data has been deleted", especially wrt to nightly and weekly backups. If you've been "in the system" for a while and your "record" is expunged...can it really be so? Does the expunge process actually go back through backups and remove them from there too? I kind of doubt it, because backups are always "hands off" unless you're restoring. I ask this also for the purposes of GDPR and the big tech companies (FAANG). In my own stuff, I'd feel obliged to make a disclaimer: "Yes, I've deleted your stuff, and the backups of the data (which I still have), will rotate out of existence in nnn days." I would also need to keep the deletion request handy for nnn days, just in case I needed to restore data (& so that I could re-delete their data).