Ability to delete client records after 10 years (or automatically delete)

Standard health records retention laws are to shred files after 10 years, and to delete digital data. Currently, there is only an option to make a profile inactive, but this status can easily be changed so that the file details are visible.  Need a way to delete the record, automatically delete it, or somehow lock it so only super admins can access