In MDC3, what is data sovereignty?

• A. Data sovereignty refers to the physical location of data storage but has no legal implications.
• B. Data sovereignty concerns the legal jurisdiction of data storage and affects privacy, security controls, and regulatory compliance.
• C. Data sovereignty is about data formatting standards.
• D. Data sovereignty determines how often data is backed up.

Answer: (B)

Data sovereignty is about the legal jurisdiction that applies to data based on where that data is stored or processed. The location matters because different countries and regions have distinct privacy laws, data protection requirements, and regulatory rules. So, where data resides determines what protections you must implement, how data can be moved across borders, and which audits or penalties apply if rules are violated. In MDC3, recognizing data sovereignty helps you align privacy protections, security controls, and compliance efforts with the applicable laws of the data’s jurisdiction. It’s not just about physical placement, but the legal framework that governs the data. The other choices miss the legal and regulatory aspect, and focus on irrelevant details like formatting standards or backup frequency.