GDPR apparently does: https://www.itgovernance.eu/blog/en/the-gdpr-how-the-right-t...
If data is on backup tapes you seem to be able to inform them of how long your retention policies are.
If data is on backup tapes you seem to be able to inform them of how long your retention policies are.
If you decide to go down this route, you should bear in mind that other supervisory authorities might be stricter and that you must be able to demonstrate that it’s impractical to delete backup data.
This will require, at the very least, a risk assessment, business impact assessment and data protection impact assessment.