Knowing the location of all personal data is also necessary to comply with a right to erasure request. You will need to ensure that all personal data of a given subject is deleted, assuming that you do not have a business reason to keep said data.

Read full article on Help Net Security