Comment by yenda

Or they remove them from the dataset in batches every X months and retrain. You have a few months to comply to gdpr requests