When you send a gdpr request to an instance, it is required to forward it to all parties it shared data with. So all instances it federates with.
But I am not talking about gdpr requests but data usage. Intentionally not removing data a user requested to be removed would get you in truble with the legitimate use (part of consent) requirements.