An approach of &quot;delete all personal data over X days old&quot; would actually solve a lot of those companies&#x27; data protection issues. It would also make them less likely to be hacked, since they would be less tempting targets. Why try to hack some celebrity&#x27;s chat app if you know all nudie pics are deleted after X days?