Comment by ijcd

My favorite approach is encrypting all of a user’s data (everywhere) and just deleting the key from a central store instead of actually erasing.