It's not a universal rule that you have to delete personal data on request. If there's a "legitimate interest", you don't need to delete it even if asked to. Bu

It's not a universal rule that you have to delete personal data on request. If there's a "legitimate interest", you don't need to delete it even if asked to. But you will need to have that legitimate interest documented. What exactly do you envision being the bad outcome here where you are asked to remove personal information and don't have a legitimate interest to keep it for?