[matthewmacleod]

You have misunderstood the requirements of the GDPR. CNIL, for example, has made it explicitly clear that so long as an effective retention policy is in place then PII does not need to be removed from backups on demand.

[akvadrako]

If by that you mean backups need to be deleted after a certain period then it's effectively the same thing.