The EU's new centralized API-PNR router is legally required to erase passenger data immediately, permanently, and automatically once it finishes routing the information to national authorities. But that deletion promise exists only on paper: the router is not yet operational,…