Hmm, not a fan of this idea. Feels like it's encouraging vigilantism and 'taking the law into your own hands', which is not something a well run society should be incentivising. I mean, it seems like someone who hacked another person or organisation's systems to remove private data could end up wrecking a bunch of other things, which wouldn't be good for anyone.
And then what if its a case of mistaken identity? You don't really have proof the data you're trying to erase is on the other party's system until you break into it, which could then leave the other party extremely annoyed and wanting to do the same back...
Eh, just feels like companies and individuals wanting to become internet vigilantes if you ask me.