My guess is that the "processing" of the data is still controlled by a centralized authority (source code is owned by the company) and that it would have to be compliant to the law, in that it's underlying infrastructure needs to cary out the delete action no matter the design.