[justin66]

GDPR is principles-based regulation. No specific thing you mentioned actually matters, what matters is whether anyone's privacy rights will be violated by rolling back years worth of deletes or edits.