How to Handle Data Deletion Requests (GDPR, CCPA, and Beyond)

## The Legal Basics (Not Legal Advice)

Under GDPR, individuals in the EU have the "right to erasure." Under CCPA/CPRA, California residents have the right to request deletion of personal information. Similar laws exist in Brazil (LGPD), Canada (PIPEDA), and a growing list of US states.

The common thread: when someone asks you to delete their data, you generally need to do it within a specific timeframe. GDPR gives you 30 days. CCPA gives you 45 days (with a possible 45-day extension).

This is...