Net firms will be obliged to delete personal data when people request it.