For (1), Use a "mark as deleted" option, with extremely strict permissions on viewing deleted data, to protect privacy.