Isn't the common practice to just replace the personal data in the db with garbage and otherwise leave the records in place - i.e. to prevent accidental reuse o

Isn't the common practice to just replace the personal data in the db with garbage and otherwise leave the records in place - i.e. to prevent accidental reuse of the ids which could have unforseen consequences? If their user now brings up "deleted user 12345", you've done your job and deleted the data they cared about.