Agree they should delete data after a set time. But it’s just too tempting for companies to keep you on the books, so they can market to you. Also, even if there was a law, I don’t know how it could be enforced unless there was mass auditing, and that’s never gonna happen. I think regular data breaches are just the new normal. Sigh.