This might be something. https://vvvvalvalval.github.io/posts/2018-05-01-making-a-datomic-system-gdpr-compliant.html#datomic_excision,_and_its_limitations

An interesting comment here: https://www.reddit.com/r/Clojure/comments/8gfpb3/making_a_datomic_system_gdprcompliant/dybgot7/

How is your company handling backups?

They contain user data after all.

Late reply but I meant to send a link. I don't have answers really - just getting across things myself. I did enjoy this post https://techblog.bozho.net/gdpr-practical-guide-developers/

There's a bit about backups in there...

What about backups? Ideally, you should keep a separate table of forgotten user IDs, so that each time you restore a backup, you re-forget the forgotten users.

Yes, different lawyers are interpreting the requirements there differently. But datomic and backups function largely the same.