Prohibited by default; cross-border flow enabled
No mandatory localization; transfer with consent
Open transfer with adequacy or contract safeguards
Public sector ESOs must store data domestically
Conditional transfer requiring destination adequacy
Mandatory domestic server & data storage for foreign tech
Strict local data storage and direct state access
Traffic routing through state gateway; localized logs
Mandatory local server storage for telecom operators
Government data localization with commercial exemptions
Provisional data management rules pending DEFA accession
