I have a question regarding the Data Protection Act and the deletion of users private information. If a website was running a weekly backup of users private data (name, date of birth, address etc.) and then these backups were being placed in an offline server where they were archived, what system would there have to be in place regarding the deletion of users private data?
If for example, a user wanted to delete their user account on this website, would the deletion on the online server be enough, or would a technician have to go through all of these backups to delete their data from those too?