Any gov or military contract data usually has specific requirements stating data storage requirements.
There are other data laws in other countries that are not USA gov that explicitly talk about customers data storage and it's handling.
Any gov or military contract data usually has specific requirements stating data storage requirements.