Lol. As if the data was ever going to be destroyed. Way too many interested parties with big pockets for that data to be destroyed.
Also "kept for 2 weeks (or whatever the period was) and then destroyed" could easily mean the data is handed to another party before destruction. Thereby remaining compliant with their policy, all the while other parties have the data.
