[fc417fc802]

If your contract says there's no data retention and then a bunch of your retained data gets leaked in a breach presumably you have grounds for a lawsuit.

[ted_dunning]

That may be true, but it is likely that the contract limits you to arbitration, forbids class action and limits the penalty dramatically.