US law does not require them to delete everything a person who once been in Crimea ever touched. Let's not shift the blame from stupid overreaction and corporate CYA to "follow the law". There are many ways of following the laws without being stupid.