They only need to save as many backup as are required to make them feel comfortable. They may want to establish a policy such as keeping daily backups for a month; keep month-end backups for a year; and year-end backups indefinitely. But is it entirely up to them and can also be influenced by what other backup systems they have in place.