Don't Delete the Row. Delete the Key.

Append-only history and GDPR-style erasure look incompatible. They are not, if you put the secret in two places.