Pattern
Deletion is the sharpest privacy test
A verified end-to-end deletion exercises the data map, the vendor list, the backup policy, and the derived-data problem at once. Few organisations pass it on the first attempt.
The exercise
Claim: recommendation
Seed a synthetic subject through the normal front door, let it propagate for a full cycle including analytics and vendor exports, then submit a deletion request through the ordinary channel. Afterwards, search for the identifiers everywhere: primary stores, warehouses, logs, caches, backups, ticketing systems, and vendor environments.
Record what remains, why, and whether the remaining copies are consistent with the published notice. The result is usually the first honest data map the organisation has had.
The limits of this test
Claim: unknown
A passed deletion test says nothing about access control, consent enforcement, or re-identification risk. It proves one property well.