Privacy laws are not about the best interest of the business. As pointed out above, you are allowed to keep all data necessary to provide your customer what th

Privacy laws are not about the best interest of the business. As pointed out above, you are allowed to keep all data necessary to provide your customer what they purchased. Losing that data is not the customer's problem, but yours. If you cannot keep your customer data safe indefinitely, then maybe you should've settled on a business model that does not require keeping customer data indefinitely.