While the data itself should be erased as requested, the records of the erasure request should be kept for a reasonable period, typically ranging from 1 to 5 years, depending on your jurisdiction and internal policies. This helps in demonstrating compliance during audits.