Think about it in terms of risk / reward or if you like, shareholder value.

If the value of the data exceeds the fine combined with the risk of it being discovered, the data will continue to exist.

Factor in the cost of actually guaranteeing that deleting something across all online, nearline, offline and archived data stores and the chances of anything being purposely deleted are not high.

Accidental data loss, sure, purposeful data loss, I can’t see it happening.