It probably does. But it requires someone to pick the battle (a customer or an enforcement agency on their own) to get it enforced.

Depends: Do they not delete the data if you explicitly contact them and tell them to do it, or do they just not give you a convenient button in the UI?