If you automatically delete everything after the statutory retention period, you're fine. If you conditionally do so, that's when you have explaining to do.