Your mission, should you decide to accept it, is to implement a sound data sanititization program.

https://www.securitymagazine.com/articles/89540-clear-purge-destroy-when-data-must-be-eliminated-part-2-of-a-2-part-series-on-information-disposal-requirements