> Perhaps they can have the concept of you always have a personal account, and you get /invited/ into an organisation?
That sucks, and causes problems. Dropbox tried it. On the organisation side, they now have to remember that user redpuppy925 is actually an org member, rather than by the organisation identity. Then the user interface would have to show their personal and org content at the same time. You really don't want that happening on their home family computer, nor would the user likely appreciate their personal content always being available at work. It ends up far easier putting the wrong items in the wrong place.
As an org admin, it should be very clear who has access to org information. And when they leave it should be very easy to revoke that access. Backups and auditing should only cover org data, not personal content.