Multiple ChoiceIntermediate 45s
Data residency constraint enforcement
Under GDPR you must keep EU user personal data physically stored inside the EU. Which approach is most defensible for a global service?
Options
- 1Store all data in a single US region but encrypt each record, relying on encryption alone to satisfy EU residency without moving data
- 2Replicate all data to every region but tag EU rows with a residency flag, then filter reads at the application layer by that flag
- 3Store only EU users in the EU and let everyone else share one global database, treating non-EU data as exempt from residency rules
- 4Partition data by user residency region and pin each partition's primary storage to that legal jurisdiction
Think you can answer under pressure?
Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.