I would expect them to read the terms of their contract in regards to how their data is backed up, can it be restored if deleted, how long its retained, etc. I

I would expect them to read the terms of their contract in regards to how their data is backed up, can it be restored if deleted, how long its retained, etc. If they just go "derp derp put it in cloud" they are negligent.