[lazyasciiart]

> It would be great to have a regular process to delete old data if you don’t need it for business purposes, and this is hard to do because you could develop an innovative way to add customer value using the old data you don’t know of today.

It is not "hard to do" just because you would like not to do it. This is the first step you should be taking, not faffing around with international corporate registrations and encryption to create weak protection for data that you shouldn't have in the first place.