Yep, it’s tough. One of the more unexpectedly complicated aspects of GDPR compliance is the strain that full deletes put on a system.

You have to break it into small batches across the cascade of associated data.