Data sovereignty is correct because it specifically refers to the notion that data is subject to the legal requirements and regulations of the country in which it physically resides. Compliance with data sovereignty is critical when operating in multiple jurisdictions, as failure to adhere to local data laws can result in significant legal and financial penalties.