Businesses are not required by law to back up their data, although it is highly advisable to do so. If your data isn’t backed up and you experience a data breach, agencies such as the ICO (Information Commissioner’s Office) will want to know why. In these instances, you must prove that you made every reasonable effort to protect your consumers’ data, or you could face heavy fines and citations.