Chapter 1
Cloud Architecture
Course: Comptia Cloud Cv0 004
Subject: Comptia Cloud Cv0004
Chapter: Security
1. Data Sovereignty
Definition
Data sovereignty refers to the principle that digital data is subject to the laws and governance structures of the country or region where it is physically stored or processed. This is rooted in national jurisdiction and has profound implications in cloud computing and cross-border data transfers.
Compliance Relevance
- Directly impacts how and where organizations store and process data.
- Influences decisions around data center selection, cloud regions, and cross-border access.
- Requires compliance with national and regional data protection frameworks, such as:
GDPR (EU) – Requires data to be processed with adequate protection, especially if transferred outside the EU.
CCPA (California) – Requires transparency about data storage and access by third parties.
POPIA (South Africa) – Prohibits cross-border data transfers without equivalent protection laws.
- GDPR (EU) – Requires data to be processed with adequate protection, especially if transferred outside the EU.
- CCPA (California) – Requires transparency about data storage and access by third parties.
- POPIA (South Africa) – Prohibits cross-border data transfers without equivalent protection laws.