When a data subject invokes the right to be forgotten, what is the difference between anonymizing the data versus deleting the record in Salesforce, and which approach better preserves referential integrity and audit history?