[paxunix]

So when does the cottage industry of companies spring up that take data deletion requests in bulk from classes of EU citizens and batch them up for submission en masse to BigCo? And then also sell you a monitoring service to make sure that BigCo actually did go and delete all the data they were using (at least, that which is publicly visible)? And then when they find that one piece of data that wasn't deleted, sue BigCo?

It's probably far-fetched to think there's DDOS potential here for a company's data officer(s), but when do the bot farm service vendors craft significant numbers of realistic user accounts and then use the above companies to drown BigCo in deletion requests for those fake users?