Where is my data anyway? Data sovereignty challenges in a world of SaaS and Cloud
Inventory storage, backups, logs and support access across services and regions. Check contracts and settings rather than primary hosting location alone.
Putting data and access into practice
Define purpose, scope, access and retention before collection. Public display, internal processing and sensitive information need distinct permissions.
Checking the result
Complete a workflow with minimal data and identify owners for access, correction and deletion. Responsible specialists must separately confirm applicable legal or sector requirements.
