It's likely impossible to delete data from many websites / webapps.

In a previous job we had the following
* Deleting a record set a deleted flag in the db to true
* Tertiary record of who changed what is recorded
* Application logs recorded requests which would include the data in question
* HIPAA audit trail service
* DB snapshots were taken daily / weekly, etc
* Separate data warehouse for BI reporting

It would have been a monumental task to actually delete someone's data.

At another place I worked we simply deleted any record with private data once it was 60 days old. Probably the least elegant response possible but at least we were GDPR complaint.

I'm sure there are companies out there with ways to handle deleting records for real from multiple warehouses when requested. I just suspect that to be rare and that proper deletion is something that needs to be implemented as the application and infrastructure is being architected. It also needs to be balanced against the need for recovery from mistakes (a user mistake or a serious bug).

So yeah, I'm doubtful deleting DM's is going to make any difference as Twitter implodes.

@telnetlocalhost Yeah i fully expect that the post deletes that I did via the API on twitter did nothing but set the tweets to not visible. If they were truly deleting data, I would expect verbiage about being deleted from backups after the backups age out