I do think that hard deletes may sometimes be required to comply with legal requirements (e.g. complete expungement of personal information relating to a user).

I do think that hard deletes may sometimes be required to comply with legal requirements (e.g. complete expungement of personal information relating to a user). If it is not required by statutory law, sometimes it is written into commercial contracts.