Nobody wants to be left holding all of the legal jeopardy when a data breach exposes the personal information of thousands of consumers. But where companies used to be able to forge deals with data processing and storage providers that foisted the majority of the liability for a breach into the arms of the vendor, an increasingly complex web of global privacy laws and the advent of remote working may be tipping the balance of power.