Ability to tag and remove personal and private information

More and more, our vendor partners are requiring us to remove personal and private information from all of our systems after a specified time. For example, Amazon requires any personal and private information stored about Amazon buyers in our systems to be removed within 30 days of an order. GDPR and CCPA also have very strict requirements about storing personal and private information, and also reporting on it. We often need to include personal and private information in our support tickets but need a way to either automatically or manually expire this information after a time period. However, there doesn't seem to be a good way to specifically tag information in a ticket as PPI. We can tag the entire ticket, but then we need to review the entire ticket and edit specific sections to remove the PPI. It would be great if we could highlight PPI in a ticket and designate it as PPI. Then, later on, when we need to remove all PPI from our systems, we could press a button (or have it run automatically each day) to clear out any PPI over x days old.