• Microsoft tells nonprofits their deleted M365 data isn't coming back

    From Jethro@jethro_UK@hotmailbin.com to uk.legal.moderated on Mon Sep 28 14:33:55 2026
    From Newsgroup: uk.legal.moderated

    Cloud provide loses *all* a clients data after selling service which was supposed to eliminate the need for you to backup.

    How much could they be liable for ?

    My guess is -u0, but would be curious to know if any posters have an
    advance on that.

    FWIW I worked in a UK non profit that was entirely reliant on M365. If
    they suddenly lost all their data, that would be that. They had nothing
    else going on.

    Idly pondering, losing all your emails means you also lose your defence
    in any number of possible actions from customers and staff.

    https://www.theregister.com/saas/2026/09/28/microsoft-tells-nonprofits- their-deleted-m365-data-isnt-coming-back/5299433

    Microsoft accidentally wiped some nonprofit customers' M365 data before
    their retention period expired _ and now says it cannot tell them what disappeared, or even whether they lost anything.

    The cockup followed Microsoft's retirement of its Microsoft 365 Business Premium grant, which gave eligible nonprofits ten free licenses for the productivity suite.

    Microsoft announced in May 2025 that the grant would not renew after July
    1 that year. It offered eligible nonprofits up to 300 free Microsoft 365 Business Basic licenses, alongside discounted pricing for plans including Business Premium.

    The company urged customers to move users onto another nonprofit plan
    before cancellation to avoid disruption or data loss. Organizations could
    also export anything they did not intend to retain in Microsoft 365.

    The problem arose after the subscriptions were deactivated. In an email
    to one affected customer seen by The Register, Microsoft admitted that,
    "due to an error," it had deleted remaining data before the retention and export window closed. Attempts to recover it had failed.

    "We have now investigated the recovery options, but unfortunately, the
    data cannot be recovered," Microsoft said.

    Redmond cannot determine what disappeared either. The company said it was "currently unable to provide a list showing which data may have been
    deleted or whether any data was deleted at all." It could say only that
    the problem involved expired Business Premium subscriptions.

    Microsoft confirmed the premature deletion to The Register. "After the applicable notice periods concluded and subscriptions were terminated, an error resulted in remaining data, if any, being deleted before the
    retention period had ended," a spokesperson said. "The impacted content
    would have been data associated with a customer's expired M365 Business Premium subscription."

    Microsoft did not say how many nonprofits were affected, how prematurely
    the deletion occurred, or what caused the error.

    The company said it regretted the impact and was offering affected
    nonprofits a free "concierge service," a meeting with a Microsoft
    specialist to help set up a new Microsoft 365 environment and answer questions.

    Useful if you need help building a shiny new environment. Less useful if
    what you really wanted was the data Microsoft deleted from the old one.

    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Jon Ribbens@jon+usenet@unequivocal.eu to uk.legal.moderated on Mon Sep 28 16:55:25 2026
    From Newsgroup: uk.legal.moderated

    On 2026-09-28, Jethro <jethro_UK@hotmailbin.com> wrote:
    Cloud provide loses *all* a clients data after selling service which was supposed to eliminate the need for you to backup.

    How much could they be liable for ?

    My guess is -u0, but would be curious to know if any posters have an
    advance on that.

    I also think -u0. The data was only deleted after the service had
    expired, which the customers should certainly have known about.
    After the expiry, there is supposed to be a grace period before
    any data is deleted permanently, and it's this free grace period
    bit that went wrong, rather than any contractual subscribed service.
    It's still an epic fuckup, but it would be a bit tricky to hold
    Microsoft monetarily liable I think.

    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Roger Hayter@roger@hayter.org to uk.legal.moderated on Mon Sep 28 17:08:15 2026
    From Newsgroup: uk.legal.moderated

    On 28 Sep 2026 at 17:55:25 BST, "Jon Ribbens" <jon+usenet@unequivocal.eu> wrote:

    On 2026-09-28, Jethro <jethro_UK@hotmailbin.com> wrote:
    Cloud provide loses *all* a clients data after selling service which was
    supposed to eliminate the need for you to backup.

    How much could they be liable for ?

    My guess is -u0, but would be curious to know if any posters have an
    advance on that.

    I also think -u0. The data was only deleted after the service had
    expired, which the customers should certainly have known about.
    After the expiry, there is supposed to be a grace period before
    any data is deleted permanently, and it's this free grace period
    bit that went wrong, rather than any contractual subscribed service.
    It's still an epic fuckup, but it would be a bit tricky to hold
    Microsoft monetarily liable I think.

    In general I don't see how any data storage provider, even one actually contracted to preserve the data, could possibly have unlimited liability for consequential loss resulting from the loss of data. Mainly because the potential consequential loss is effectively unbounded depending on factors the storage provider cannot know. Presumably any liability for consequential loss depends entirely on the contract, which will have been originally offered by the provider.

    I suspect in the case of non-profit organisations (isn't this an American term?) or private individuals compensation is commonly confined to money paid for the storage service or perhaps a nominal penalty amount.

    The consequences of data loss are likely only to be covered by separately arranged insurance.
    --

    Roger Hayter

    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Jethro@jethro_UK@hotmailbin.com to uk.legal.moderated on Mon Sep 28 17:19:33 2026
    From Newsgroup: uk.legal.moderated

    On Mon, 28 Sep 2026 16:55:25 +0000, Jon Ribbens wrote:

    On 2026-09-28, Jethro <jethro_UK@hotmailbin.com> wrote:
    Cloud provide loses *all* a clients data after selling service which
    was supposed to eliminate the need for you to backup.

    How much could they be liable for ?

    My guess is -u0, but would be curious to know if any posters have an
    advance on that.

    I also think -u0. The data was only deleted after the service had
    expired,

    From the article

    Microsoft accidentally wiped some nonprofit customers' M365 data *before*
    their retention period expired _ and now says it cannot tell them what disappeared, or even whether they lost anything.

    and

    In an email to
    one affected customer seen by The Register, Microsoft admitted that, "due
    to an error," it had deleted remaining data before the retention and
    export window closed.

    So customers were not at fault here.





    which the customers should certainly have known about. After
    the expiry, there is supposed to be a grace period before any data is
    deleted permanently, and it's this free grace period bit that went
    wrong, rather than any contractual subscribed service.
    It's still an epic fuckup, but it would be a bit tricky to hold
    Microsoft monetarily liable I think.


    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Jethro@jethro_UK@hotmailbin.com to uk.legal.moderated on Mon Sep 28 17:21:28 2026
    From Newsgroup: uk.legal.moderated

    On Mon, 28 Sep 2026 17:08:15 +0000, Roger Hayter wrote:

    On 28 Sep 2026 at 17:55:25 BST, "Jon Ribbens"
    <jon+usenet@unequivocal.eu> wrote:

    On 2026-09-28, Jethro <jethro_UK@hotmailbin.com> wrote:
    Cloud provide loses *all* a clients data after selling service which
    was supposed to eliminate the need for you to backup.

    How much could they be liable for ?

    My guess is -u0, but would be curious to know if any posters have an
    advance on that.

    I also think -u0. The data was only deleted after the service had
    expired, which the customers should certainly have known about. After
    the expiry, there is supposed to be a grace period before any data is
    deleted permanently, and it's this free grace period bit that went
    wrong, rather than any contractual subscribed service.
    It's still an epic fuckup, but it would be a bit tricky to hold
    Microsoft monetarily liable I think.

    In general I don't see how any data storage provider, even one actually contracted to preserve the data, could possibly have unlimited liability
    for consequential loss resulting from the loss of data. Mainly because
    the potential consequential loss is effectively unbounded depending on factors the storage provider cannot know. Presumably any liability for consequential loss depends entirely on the contract, which will have
    been originally offered by the provider.

    I suspect in the case of non-profit organisations (isn't this an
    American term?) or private individuals compensation is commonly confined
    to money paid for the storage service or perhaps a nominal penalty
    amount.

    The consequences of data loss are likely only to be covered by
    separately arranged insurance.

    I worked for a non profit company in the UK. A training provider that exclusively used M365.

    I mean if the message here is that no matter what you are paying for,
    it's up to you as a customer not to rely on it, then so be it.

    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Jon Ribbens@jon+usenet@unequivocal.eu to uk.legal.moderated on Mon Sep 28 18:01:58 2026
    From Newsgroup: uk.legal.moderated

    On 2026-09-28, Jethro <jethro_UK@hotmailbin.com> wrote:
    On Mon, 28 Sep 2026 16:55:25 +0000, Jon Ribbens wrote:
    On 2026-09-28, Jethro <jethro_UK@hotmailbin.com> wrote:
    Cloud provide loses *all* a clients data after selling service which
    was supposed to eliminate the need for you to backup.

    How much could they be liable for ?

    My guess is -u0, but would be curious to know if any posters have an
    advance on that.

    I also think -u0. The data was only deleted after the service had
    expired,

    From the article

    Microsoft accidentally wiped some nonprofit customers' M365 data *before* their retention period expired _ and now says it cannot tell them what disappeared, or even whether they lost anything.

    and

    In an email to
    one affected customer seen by The Register, Microsoft admitted that, "due
    to an error," it had deleted remaining data before the retention and
    export window closed.

    Yes, the "retention and export window" is the "grace period"
    I mentioned.

    So customers were not at fault here.

    I didn't say they were at fault, exactly. But storing the only copies
    of your vital data in a service that has expired is... unwise.

    which the customers should certainly have known about. After
    the expiry, there is supposed to be a grace period before any data is
    deleted permanently, and it's this free grace period bit that went
    wrong, rather than any contractual subscribed service.
    It's still an epic fuckup, but it would be a bit tricky to hold
    Microsoft monetarily liable I think.

    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Roger Hayter@roger@hayter.org to uk.legal.moderated on Mon Sep 28 18:42:01 2026
    From Newsgroup: uk.legal.moderated

    On 28 Sep 2026 at 19:01:58 BST, "Jon Ribbens" <jon+usenet@unequivocal.eu> wrote:

    On 2026-09-28, Jethro <jethro_UK@hotmailbin.com> wrote:
    On Mon, 28 Sep 2026 16:55:25 +0000, Jon Ribbens wrote:
    On 2026-09-28, Jethro <jethro_UK@hotmailbin.com> wrote:
    Cloud provide loses *all* a clients data after selling service which
    was supposed to eliminate the need for you to backup.

    How much could they be liable for ?

    My guess is -u0, but would be curious to know if any posters have an
    advance on that.

    I also think -u0. The data was only deleted after the service had
    expired,

    From the article

    Microsoft accidentally wiped some nonprofit customers' M365 data *before*
    their retention period expired _ and now says it cannot tell them what
    disappeared, or even whether they lost anything.

    and

    In an email to
    one affected customer seen by The Register, Microsoft admitted that, "due
    to an error," it had deleted remaining data before the retention and
    export window closed.

    Yes, the "retention and export window" is the "grace period"
    I mentioned.

    So customers were not at fault here.

    I didn't say they were at fault, exactly. But storing the only copies
    of your vital data in a service that has expired is... unwise.

    Storing any data that you want to keep without the original and at least two backups, one off site, is unwise.

    Whether cloud storage counts as one off site is a matter of opinion, but it certainly doesn't if haven't got at least two copies on site.


    which the customers should certainly have known about. After
    the expiry, there is supposed to be a grace period before any data is
    deleted permanently, and it's this free grace period bit that went
    wrong, rather than any contractual subscribed service.
    It's still an epic fuckup, but it would be a bit tricky to hold
    Microsoft monetarily liable I think.
    --
    Roger Hayter

    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Nick Odell@nickodell49@yahoo.ca to uk.legal.moderated on Tue Sep 29 07:18:54 2026
    From Newsgroup: uk.legal.moderated

    On 28 Sep 2026 18:42:01 GMT, Roger Hayter <roger@hayter.org> wrote:

    On 28 Sep 2026 at 19:01:58 BST, "Jon Ribbens" <jon+usenet@unequivocal.eu> >wrote:

    On 2026-09-28, Jethro <jethro_UK@hotmailbin.com> wrote:
    On Mon, 28 Sep 2026 16:55:25 +0000, Jon Ribbens wrote:
    On 2026-09-28, Jethro <jethro_UK@hotmailbin.com> wrote:
    Cloud provide loses *all* a clients data after selling service which >>>>> was supposed to eliminate the need for you to backup.

    How much could they be liable for ?

    My guess is u0, but would be curious to know if any posters have an
    advance on that.

    I also think u0. The data was only deleted after the service had
    expired,

    From the article

    Microsoft accidentally wiped some nonprofit customers' M365 data *before* >>> their retention period expired _ and now says it cannot tell them what
    disappeared, or even whether they lost anything.

    and

    In an email to
    one affected customer seen by The Register, Microsoft admitted that, "due >>> to an error," it had deleted remaining data before the retention and
    export window closed.

    Yes, the "retention and export window" is the "grace period"
    I mentioned.

    So customers were not at fault here.

    I didn't say they were at fault, exactly. But storing the only copies
    of your vital data in a service that has expired is... unwise.

    Storing any data that you want to keep without the original and at least two >backups, one off site, is unwise.

    Whether cloud storage counts as one off site is a matter of opinion, but it >certainly doesn't if haven't got at least two copies on site.


    which the customers should certainly have known about. After
    the expiry, there is supposed to be a grace period before any data is
    deleted permanently, and it's this free grace period bit that went
    wrong, rather than any contractual subscribed service.
    It's still an epic fuckup, but it would be a bit tricky to hold
    Microsoft monetarily liable I think.

    Not Microsoft but, buried in the 20,000+ word Apple iCloud customer
    agreement at, IIRC[1] Section A, part IV.4 is the insistence that
    customers should have their own backups of anything stored on iCloud.
    I'm sure other cloudy enterprises must have similar terms.

    And yes, for very boring reasons, I did read it all last night.

    Nick
    [1]But ICBA to go back and double check

    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Nicholas Collin Paul de =?UTF-8?Q?Glouce=C5=BFter?=@thanks-to@Taf.com to uk.legal.moderated on Mon Sep 28 19:42:33 2026
    From Newsgroup: uk.legal.moderated

    |------------|
    |"insurance."|
    |------------|

    Does a sucker exist such that such a sucker could seriously dare to go
    to an insurance company to say with a straight face that he used to
    rely on Microsoft not to mess up after decades of bugs, so such a
    sucker be owed compensation by said insurance company?

    I make backups of backups of backups of backups. E.g. the
    Bourne-Again-SHell (BASH) (computer-command-line) archives for
    commands which I typed into a computer in the Year 2025 take up more
    than 83 megabytes in 2,963 files with nearly 3 million lines (29,825
    unique lines). A normal luser would have upto 1 file with upto a few
    bytes with so few lines that they could all be displayed concurrently
    on a single monitor.

    A lawyer is under a legal obligation to give me an answer which she
    never does, so I sue her. So she attempts to defend herself by
    purporting that she emailed this would-had-been answer but that she
    deleted that would-had-been answer. At the time that she purportedly
    sent that purported email, I used to use 2 email accounts in 2
    countries and I used to back up emails in another country at that
    time. I never set an email client to be able to automatically adjust
    more than 1 email account, so her pleading that I also deleted this
    purported email relies on her pretending that I used 2 email clients
    to delete from 2 email accounts, and that I deleted it from an
    additional backup medium. I argue truthfully that I did not delete it
    (as I never got it, probably because she never wrote it). She actually
    pleads furthermore that as I concede that I could had deleted
    unsynchronised copies in 3 countries, that I do not prove that she
    never sent this email. She somehow does not go onto plead that I
    concede that under quantum physics, she could had sent it to me but it
    could had gone astray by improbably becoming teleported to Mars with
    her backup thereof which she then decided to delete.

    Lawyers are chancers. She is a Microsoft user.

    In the same process I point out that her pleading is probably false,
    as I e.g. archive the public permanent emails of the 1st moderated
    USENET group from 1986 ( HTTP://Gloucester.Insomnia247.NL/comp.compilers/1980s/86-01-001
    ) to the end of 2025 ( HTTP://Gloucester.Insomnia247.NL/comp.compilers/2020s/25-12-003
    ).

    (S. HTTP://Gloucester.Insomnia247.NL/ fuer Kontaktdaten!)

    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Jeff Gaines@jgnewsid@outlook.com to uk.legal.moderated on Mon Sep 28 20:48:15 2026
    From Newsgroup: uk.legal.moderated

    On 28/09/2026 in message <119e7mn$3jgl6$38@dont-email.me> Jethro wrote:

    On Mon, 28 Sep 2026 17:08:15 +0000, Roger Hayter wrote:

    On 28 Sep 2026 at 17:55:25 BST, "Jon Ribbens"
    <jon+usenet@unequivocal.eu> wrote:

    On 2026-09-28, Jethro <jethro_UK@hotmailbin.com> wrote:
    Cloud provide loses all a clients data after selling service which
    was supposed to eliminate the need for you to backup.

    How much could they be liable for ?

    My guess is -u0, but would be curious to know if any posters have an >>>>advance on that.

    I also think -u0. The data was only deleted after the service had >>>expired, which the customers should certainly have known about. After
    the expiry, there is supposed to be a grace period before any data is >>>deleted permanently, and it's this free grace period bit that went
    wrong, rather than any contractual subscribed service.
    It's still an epic fuckup, but it would be a bit tricky to hold
    Microsoft monetarily liable I think.

    In general I don't see how any data storage provider, even one actually >>contracted to preserve the data, could possibly have unlimited liability >>for consequential loss resulting from the loss of data. Mainly because
    the potential consequential loss is effectively unbounded depending on >>factors the storage provider cannot know. Presumably any liability for >>consequential loss depends entirely on the contract, which will have
    been originally offered by the provider.

    I suspect in the case of non-profit organisations (isn't this an
    American term?) or private individuals compensation is commonly confined
    to money paid for the storage service or perhaps a nominal penalty
    amount.

    The consequences of data loss are likely only to be covered by
    separately arranged insurance.

    I worked for a non profit company in the UK. A training provider that >exclusively used M365.

    I suspect Roger's point is that they are called not for profit companies
    in the UK.
    --
    Jeff Gaines Dorset UK
    Though no-one can go back and make a new start, everyone can start from
    now and make a new ending.

    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Jethro@jethro_UK@hotmailbin.com to uk.legal.moderated on Mon Sep 28 19:44:10 2026
    From Newsgroup: uk.legal.moderated

    On Mon, 28 Sep 2026 18:42:01 +0000, Roger Hayter wrote:

    On 28 Sep 2026 at 19:01:58 BST, "Jon Ribbens"
    <jon+usenet@unequivocal.eu> wrote:

    On 2026-09-28, Jethro <jethro_UK@hotmailbin.com> wrote:
    On Mon, 28 Sep 2026 16:55:25 +0000, Jon Ribbens wrote:
    On 2026-09-28, Jethro <jethro_UK@hotmailbin.com> wrote:
    Cloud provide loses *all* a clients data after selling service which >>>>> was supposed to eliminate the need for you to backup.

    How much could they be liable for ?

    My guess is -u0, but would be curious to know if any posters have an >>>>> advance on that.

    I also think -u0. The data was only deleted after the service had
    expired,

    From the article

    Microsoft accidentally wiped some nonprofit customers' M365 data
    *before*
    their retention period expired _ and now says it cannot tell them what
    disappeared, or even whether they lost anything.

    and

    In an email to one affected customer seen by The Register, Microsoft
    admitted that, "due to an error," it had deleted remaining data before
    the retention and export window closed.

    Yes, the "retention and export window" is the "grace period"
    I mentioned.

    So customers were not at fault here.

    I didn't say they were at fault, exactly. But storing the only copies
    of your vital data in a service that has expired is... unwise.

    Storing any data that you want to keep without the original and at least
    two backups, one off site, is unwise.

    Whether cloud storage counts as one off site is a matter of opinion, but
    it certainly doesn't if haven't got at least two copies on site.

    But then how can you deliver value to the shareholders ? Especially as
    onsite IT - and the skills to manage it - are expensive.


    which the customers should certainly have known about. After the
    expiry, there is supposed to be a grace period before any data is
    deleted permanently, and it's this free grace period bit that went
    wrong, rather than any contractual subscribed service.
    It's still an epic fuckup, but it would be a bit tricky to hold
    Microsoft monetarily liable I think.


    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Simon Parker@simonparkerulm@gmail.com to uk.legal.moderated on Tue Sep 29 14:38:35 2026
    From Newsgroup: uk.legal.moderated

    On 28/09/2026 15:33, Jethro wrote:
    Cloud provide loses *all* a clients data after selling service which was supposed to eliminate the need for you to backup.

    How much could they be liable for ?

    My guess is -u0, but would be curious to know if any posters have an
    advance on that.
    I would suggest that M$'s liability is per your estimate and any
    organisation contemplating issuing against M$ considers carefully the asymmetry of resources available for such a claim.

    Thinking out loud:

    As might be expected, both of Microsoft's Standard Terms and Conditions
    and their Microsoft Services Agreement applicable to cloud services
    contain strict limitations of liability clauses and other disclaimers
    limiting M$'s liability to the amount paid for the product / service.
    In the instant case, the M365 service was provided at no charge meaning
    this is the level at which M$ have contractually capped their liability.

    Bear in mind that the vast majority of legislation about unfair
    contracts applies to B2C contracts and this is a B2B contract and
    companies are deemed not to need additional protection from unfair
    contract terms in legislation so there's hurdle number one.

    Those pesky M$ documents referenced in hurdle number one also give rise
    to hurdle number two.

    The "Microsoft Learn Guide on Shared Responsibility in the Cloud" [^1]
    details the core responsibility matrix quite clearly in several places.
    The responsibility for data backup and business continuity is firmly
    placed on the customer. M$ can argue that their data retention window
    was a temporary grace period for holding a copy of their data and that
    it is the customer's responsibility to maintain their own independent
    backups of this data.

    Finally, (hurdle number three), they need to prove quantifiable tangible damages.

    Given the asymmetry of resources available for issuing / defending a
    claim, I would suggest it is a non-starter.


    FWIW I worked in a UK non profit that was entirely reliant on M365. If
    they suddenly lost all their data, that would be that. They had nothing
    else going on.
    A relative, (an accountant), did similar early on in his career. He
    left fairly quickly when it became clear that the number of corners
    being cut across numerous fronts in the name of saving costs meant that
    the charity could collapse at any point leaving him exposed, so he left
    and took a more secure role elsewhere.


    Idly pondering, losing all your emails means you also lose your defence
    in any number of possible actions from customers and staff.

    That's why M$ place the ultimate burden of data backup and business
    continuity on the customer.

    Regards

    S.P.

    [^1] https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility

    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Jethro@jethro_UK@hotmailbin.com to uk.legal.moderated on Tue Sep 29 15:08:36 2026
    From Newsgroup: uk.legal.moderated

    On Tue, 29 Sep 2026 14:38:35 +0100, Simon Parker wrote:

    On 28/09/2026 15:33, Jethro wrote:
    Cloud provide loses *all* a clients data after selling service which
    was supposed to eliminate the need for you to backup.

    How much could they be liable for ?

    My guess is -u0, but would be curious to know if any posters have an
    advance on that.
    I would suggest that M$'s liability is per your estimate and any
    organisation contemplating issuing against M$ considers carefully the asymmetry of resources available for such a claim.

    Thinking out loud:

    As might be expected, both of Microsoft's Standard Terms and Conditions
    and their Microsoft Services Agreement applicable to cloud services
    contain strict limitations of liability clauses and other disclaimers limiting M$'s liability to the amount paid for the product / service.
    In the instant case, the M365 service was provided at no charge meaning
    this is the level at which M$ have contractually capped their liability.

    Bear in mind that the vast majority of legislation about unfair
    contracts applies to B2C contracts and this is a B2B contract and
    companies are deemed not to need additional protection from unfair
    contract terms in legislation so there's hurdle number one.

    Those pesky M$ documents referenced in hurdle number one also give rise
    to hurdle number two.

    The "Microsoft Learn Guide on Shared Responsibility in the Cloud" [^1] details the core responsibility matrix quite clearly in several places.
    The responsibility for data backup and business continuity is firmly
    placed on the customer. M$ can argue that their data retention window
    was a temporary grace period for holding a copy of their data and that
    it is the customer's responsibility to maintain their own independent
    backups of this data.

    Finally, (hurdle number three), they need to prove quantifiable tangible damages.

    Given the asymmetry of resources available for issuing / defending a
    claim, I would suggest it is a non-starter.


    FWIW I worked in a UK non profit that was entirely reliant on M365. If
    they suddenly lost all their data, that would be that. They had nothing
    else going on.
    A relative, (an accountant), did similar early on in his career. He
    left fairly quickly when it became clear that the number of corners
    being cut across numerous fronts in the name of saving costs meant that
    the charity could collapse at any point leaving him exposed, so he left
    and took a more secure role elsewhere.


    Idly pondering, losing all your emails means you also lose your defence
    in any number of possible actions from customers and staff.

    That's why M$ place the ultimate burden of data backup and business continuity on the customer.

    Regards

    S.P.

    [^1]
    https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-
    responsibility

    So really MS need to halve their prices so you can engage another
    provider to insulate youself from the non zero chance of MS making a catastrophic error.


    --- Synchronet 3.22a-Linux NewsLink 1.2
  • From Nick Finnigan@nix@genie.co.uk to uk.legal.moderated on Tue Sep 29 23:09:54 2026
    From Newsgroup: uk.legal.moderated

    On 29/09/2026 16:08, Jethro wrote:

    So really MS need to halve their prices so you can engage another
    provider to insulate youself from the non zero chance of MS making a catastrophic error.

    For "ten free licenses for the productivity suite" and
    "300 free Microsoft 365 Business Basic license" ?


    --- Synchronet 3.22a-Linux NewsLink 1.2