How do you handle data deletion requests?

A data subject can request the deletion of their data, and the controller must be able to respond within the legal deadlines. For this to be possible, the system must be designed from the start to locate every place where that data appears, including backups and connected systems. Some data must still be retained when a regulation requires it, such as tax records.