1. Motivations and concerns

2. International treaties and laws

3. Data localization laws and scope
    National laws  National security 

4. See also

5. References

Data localization builds upon the concept of data sovereignty that regulates certain data types by the laws applicable to the data subject or processor. While data sovereignty may require that records about a nation's citizens or residents follow its personal or financial data processing laws, data localization goes a step further in requiring that initial collection, processing, and storage occur first within the national boundaries. In some cases, data about a nation's citizens or residents must also be deleted from foreign systems before being removed from systems in the data subject's nation.^[1]

Motivations and concerns

The push for data localization greatly increased after revelations by Edward Snowden regarding United States counter-terrorism surveillance programs in 2013.^[2][3] Since then, various governments in Europe and around the world have expressed the desire to be able to control the flow of residents' data through technology. Some governments are accused of and some openly admit to using data localization laws as a way to surveil their own populaces or to boost local economic activity.^[2][4][5]

Technology companies and multinational organizations often oppose data localization laws because they impact efficiencies gained by regional aggregation of data centers and unification of services across national boundaries.^[2][6] Some vendors, such as Microsoft, have used data storage locale controls as a differentiating feature in their cloud services.^[7]

International treaties and laws

While the Trans-Pacific Partnership included language that would have prohibited data localization restrictions among participants,^[8] the treaty was abandoned and never took effect.

After Germany and France either passed or nearly passed data localization laws, the European Union was considering restrictions on data localization laws in 2017.^[9][10] Data localization laws are often seen as protectionist and would thus violate European Union competition law.

Data localization laws and scope

National laws

• Australia – health records^[2][3]
• Canada in Nova Scotia and British Columbia – public service providers: all personal data^[2][3]
• China – personal, business, and financial data^[1][2]
• Germany – telecommunications metadata^[11][12]
• India – Payment System Data^[13]
• Indonesia – public services companies must maintain data centers in country^[3]
• Kazakhstan – servers running on the country domain (.kz)^[2]
• Nigeria – all government data^[2][3]
• Russia – all personal data^[2][3][14]
• South Korea – geospatial and map data^[2][3]
• Vietnam – service providers usage data^[2][3]

National security

Most nations restrict foreign transfer of information that they consider related to national security, such as military technology.

See also

• Data governance
• Data sovereignty
• Information privacy (data protection)
• Legal aspects of computing
• Privacy
• Privacy law

References

• The Todd Corporation
• The Todd Corporation Ltd
• The Todd Glass Show
• The Toddings
• The Todd Killings
• The To-Do List
• The To Do List
• Thet Oera Linda Bok
• The Toffeemen
• The Toggery Five
• The Togoland Campaign
• The Tohatsu Corporation
• The Toiler
• The Toilers
• The Toilers (1919 film)
• The Toilers (1928 film)
• The Toilet of Venus
• The Tokugawa Museum
• The Tokyo Electric Power Co., Inc.
• The Tokyo Electric Power Company
• The Tolbooth
• The Tolerance, Equality, and Awareness Movement
• The Tolkien Society
• The Toll Gate
• The Toll House, Stanton Drew