[thedougd]

I doubt they’re doing it, but one way to handle this with WORM is to encrypt each user’s data with a key unique to the user. When they request you forget, delete the key.