Data is subject to the laws and governance of the country or region in which it is located or where it is physically stored. It means that the data's location determines which legal and regulatory jurisdictions have authority over it, and these jurisdictions can influence how the data is accessed, managed, and protected. Therefore, organizations need to decide on where they want to proceed and store their data, as this has implications for regulatory compliance, security, and privacy considerations.

Technological sovereignty is a concept that extends the principles of data sovereignty to encompass control and autonomy over the underlying technologies and digital infrastructure used by an organization. It represents the ability to make independent decisions regarding technology choices, development, and management to safeguard interests, security, and digital self-reliance.

Operational sovereignty is a concept that pertains to an organization's ability to manage and control its operations, including critical functions and processes, without undue influence or dependence on external entities independently and effectively. It encompasses various aspects of operational independence, self-reliance, and decision-making authority. Operational sovereignty is a fundamental aspect of organizational sovereignty, providing the ability to respond to changing circumstances with agility and independence.