Glossary
/
Data sovereignty

Data sovereignty

The concept affects cloud architecture, vendor selection, government access, cross-border transfers, and contractual controls. It is broader than data residency: storing data in a country does not by itself answer which organizations can access it or which laws apply to the provider. Organizations should map data flows and obtain legal guidance for the jurisdictions in which they operate.

What is Data sovereignty?

Data sovereignty is the principle that data is governed by the laws and regulatory authority of the jurisdiction connected to where it is stored, processed, or controlled.

Why it matters

The concept affects cloud architecture, vendor selection, government access, cross-border transfers, and contractual controls. It is broader than data residency: storing data in a country does not by itself answer which organizations can access it or which laws apply to the provider. Organizations should map data flows and obtain legal guidance for the jurisdictions in which they operate.

Example

A public-sector organization may require analytics data to remain under local operational control and restrict support access from personnel in other jurisdictions.

Related terms