REQ1 – Data residency

Key principles – The Operator needs to ensure that the source of personal data is in the territory of the country in question. Copies of personal data outside of the country must be less or equal than primary copies. Collecting (writing new data, modifying existing data) of personal data is allowed only in the territory of the country.

To further understand the principles of data residency, review the following two main approaches that focus on the data residency aspect in relation to personal data.