"All data of citizens must be stored within <own country/region>" is about protecting the state, not about protecting its citizens