From what I gather, a company is being asked to retain potential evidence during a lawsuit involving said data. Am I missing something? What’s outside the norm here?

Uhhh - no one should be under the impression that deleting something actually deletes it.