GDPR compliance

When 6 years have passed since an employee leaves, some data still needs to be maintained, such as medical/training information. Be good to leave name, position and dates or employment, but delete any other personal data. When you try to do it with the system as it is, you can delete information, but it remains in 'history'. Need an option to delete data, but retain other data for GDPR.