Inadvertent data destruction can violate EU privacy rules