Under California law (ccpa) and eu laws (gdpr) they should have (I believe). The question is how diligent and proactive they are or do they wait for a deletion

Under California law (ccpa) and eu laws (gdpr) they should have (I believe). The question is how diligent and proactive they are or do they wait for a deletion request. I suspect they wait.