Which term describes the concept that data may be governed by the laws of the location where it is stored, regardless of where it was collected?

• A. Data Sovereignty
• B. Jurisdiction
• C. Export Control Regulations
• D. BYOD

Answer: (A)

Data sovereignty is the principle that data is subject to the laws of the country where it is stored, regardless of where it was collected. When data sits in a particular location—whether in a physical data center or a cloud region—the legal rules of that location apply to the data. That means privacy protections, data handling requirements, access rights, and breach obligations are determined by the jurisdiction where the storage physically resides, not by where the data originated. This is especially important for cross-border storage and cloud services, where data might be stored in multiple regions; selecting a storage location effectively selects which laws govern the data.

Jurisdiction is about the authority to enforce laws, which can be related but is broader than where the data is stored. Export control regulations govern the transfer of restricted technologies across borders, not the governing laws tied to storage location. BYOD concerns device usage policies and is not about the legal regime governing stored data.