Legal Requirements, Privacy, and Data Location