While many organisations diligently back up their SaaS data, not all are GDPR-ready when it comes to the ability to restore personal data in a timely manner.
SaaS vendors typically help their customers to comply with the GDPR as it relates to the data in the production system, but these measures do not typically extend to the backups.