Mr. Niall McDonagh:

This is a major debate. On the other side, if a large cloud service provider like Microsoft has many contractual obligations to protect customers' data, its security practices will be at the highest end. Most organisations whose business is not to provide or manage cloud services will not be able to invest in those practices.

Although they may have the advantage of more fragmented data, individually they have less protection. There is a trade-off between the two.