DataResidency

Legal requirement that certain data stays within a country/region's borders.

Why we need this / what value this brings

Some jurisdictions legally require certain data to physically stay within their borders — a hosting/region choice can violate this without anyone realizing.

When to use this

Before choosing (or expanding) hosting regions, if operating in a jurisdiction with residency requirements (Canada's PIPEDA is a separate concern from GDPR, worth its own check).

How to use or implement this

Confirm which regions your data actually lives in with your cloud provider, and check that against the residency requirements of the markets you operate in.

Research questions

• Canada has its own data residency conversations (PIPEDA) distinct from GDPR — worth its own research pass, not lumped in with GDPR.

---

Empty folder — drop notes, links, and findings here as you research.