GDPR may require active online systems to delete data in response to a stream of realtime requests, so while the availability solution is to make deletion a har

GDPR may require active online systems to delete data in response to a stream of realtime requests, so while the availability solution is to make deletion a hard, manual process or a process controlled only by an isolated infrastructure team, as you automate GDPR deletion requests you will need to start exposing deletion APIs accessible to end users. This is why a lot of the comments about making read-only backups or offline backups are very challenging for firms to do if they are taking GDPR seriously.