That's a misconception. They are indeed responsible if they don't comply with laws that require them to log (to collect evidence, as one example: https://www.bakermckenzie.com/en/insight/publications/2026/0...).