Sounds like the best workaround for this is to have a deadman switch to delete all data if the phone hasn't been unlocked in a 24 hour period? Then it is your inaction that results in the destruction of the data, and you'd still be complying with the statute.