This policy addresses where your data is physically stored, and how you transfer it from one location to another. It includes what your organization will do to comply with the various laws that prohibit or restrict the transfer of citizens’ data across borders.