_________ is the legal concept whereby a cloud customer is held to a reasonable expectation for providing security of its users' and clients' privacy data.

Due care refers to the level of prudence that an ordinary, reasonable person would exercise in similar circumstances. In an IT context, it means taking reasonable steps to protect data, such as implementing standard security controls and practices to safeguard user and client privacy data.

Due diligence is the act of investigating and understanding potential risks before acting (e.g., before entering a contract or implementing a system), rather than the ongoing act of providing security.

Liability is the state of being responsible for something, especially by law, which is an outcome or condition, not the concept of reasonable expectation for security actions.

Reciprocity in security refers to a mutual exchange of security considerations or assurances between parties, which is not directly the legal expectation for a single party's data protection.