Add in a retention date to the student record and then options to delete or anonymise data to ensure compliance?