Data sovereignty concerns the laws and governance that apply to data at rest outside of a country's borders . It refers to the legal implications and regulatory controls over where data is stored geographically. Reference: CompTIA Security+ SY0-701 Official Study Guide, Domain 5.4: "Data sovereignty refers to data being subject to the laws of the country in which it resides." Exam Objectives 5.4: "Given a scenario, implement data security and privacy practices."