We had a problem with a member misbehaving in our forum - this ended up with a permanent ban.
He has now returned to us after a year, claiming we need to delete the personal information he has specified in his forum profile (basically just his real name). This according to the Data Protection Directive.
Are we obliged to do this according to European laws? This member has been causing us quite some problems/damage, and we want to avoid helping him if possible.