If it is not company data what is it doing on a company computer? Why should IT be responsible for personal files? If it gets lost it is the user's issue. If your boss, or their boss, feels it should be your responsibility to secure their personal data then you probably have bigger problems than backing up personal data.