Data Localization
What is Data Localization?
Legal requirements that mandate personal data of a country's residents to be stored and processed within that country's geographic borders.
Terms that appear alongside data localization
Each of these is named in at least one of the same controls as data localization. The number is how many controls name both.
- compliance 5 shared controls
- consent 5 shared controls
- biometric data 5 shared controls
- data protection 4 shared controls
- gdpr 4 shared controls
- audit 4 shared controls
- transparency 4 shared controls
- sensitive personal data 3 shared controls
Frameworks that govern data localization
What the standards actually require on data localization
Requirements naming data localization across 6 standards, quoted from the control text.
Article 12 of the Kazakhstan PDPL establishes the data localization requirement for biometric personal data of Kazakhstan citizens and residents - a key sovereignty provision strengthened by the 2022 amendment.
KZ-PDPL-Biometric-Data-Localization-Article12-Server-Kazakhstan-On-Soil-Data-Storage-Citizens-Residents · Kazakhstan PDPL Biometric Data Localization + Article 12 + Mandatory Server Storage in Kazakhstan + 2022 Amendment + Citizens + Residents + Foreign Cloud Provider Restrictions + Data Sovereignty + State Service for Information Security Oversight →Personal information and important data collected/generated by CII operators in the PRC must be stored within China; cross-border transfer for business necessity requires a security assessment.
CSL-Art37 · CII Data Localization and Cross-Border Assessment - Art. 37 →Per Pakistan PDPB 2023 Clauses 13-15: cross-border transfer + localisation. Requirements include (a) restrict cross-border transfer of personal data except where conditions are met including adequacy determination + appropriate safeguards + explicit consent +...
PAKPDPB-6 · Cross-Border Transfer and Data Localization →Per 152-FZ Article 18.5 + Article 12: data localization + cross-border. Requirements include (a) implement Data Localization - personal data of Russian citizens collection + recording + storage + amendment + extraction + use of databases must occur in Russia +...
RUSPD-6 · Cross-Border Transfer and Data Localization (Article 18.5) →Per VN Cyber Law Article 26: Data Localization for foreign providers of cyber services + Representative Office requirement + local data storage.
VIETNAMCYBER-3 · Data Localization and Cross-Border →Per Uzbekistan Law: security + cross-border restrictions + Data Localization requirement for personal data of Uzbek citizens.
UZBEKPDP-3 · Security, Cross-Border, Localization →Questions people ask about data localization
What is Data Localization?
Why is Data Localization important for compliance?
Which compliance frameworks address Data Localization?
Where can I learn more about Data Localization?
See how Data Localization applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.