Yes. Sometimes I have customers providing their credit card over-the-phone and it gets recorded and I cannot delete it. There is no API endpoint to delete a message (i.e. recording) either.

For Data Protection laws I don't know why this isn't already a thing?

Yes need to