For any deletion - including those requested under GDPR - I suggest that these should be made reversible (undoable) for a limited time after deletion. The limited time would be determined by the legal requirement defined by GDPR when it is a GDPR request being actioned. Possible/suggested...
xenforo.com