Not true. If they do that they are violating the law and that will show up in the audits. They have to delete the data, all records associated with that identifier, now including any 3rd party data that they bought from other brokers and did not collect or buy originally. There have been many loopholes for years but they are all being closed.