Testing Compliance with Delete after Retention