Security and privacy

I am using Moodle version 3.5 and the issue is that our moodle is growing with the rate of 1GB/day. Now our university requires to delete the users data which have been graduated from our university.

Provide me some  solution on this I have read multiple Forums and got to know about GDPR but don't know how it gonna work specifically for my case.