I’ve had a cursory look into that recently (just a simple googling) and it seems that it’s considered OK to keep the data in backups.

Which does seem weird… but to be fair, it would be near impossible to delete from backups as they exist today, it would be a law that can’t be practically applied.