Under European Union $($EU$)$ law, a cloud customer who gives sensitive data to a cloud provider is still legally responsible for the damages resulting from a data breach caused by the provider; the EU would say that it is the cloud customer$$s fault for choosing the wrong provider. This is an example of insufficient