Interesting...   I would have supposed that such a silly law would have been first created in (my country...) America.   In California, perhaps.   ;-)

In any case, as we know, the most reliable way to do such things is with a “soft delete” flag in the database record.   Although the record never actually “goes away,” it ceases to be accessible or referenced by the appropriate parts of the system.   Referential integrity within the database, however, is maintained.   The same notion could also be used to implement some kind of an EU_compliance column.   (Because, after all, laws change.)