数据主权2026:现实、相关性、路线图

BARC Topical Survey Research sponsored by Authors Dr. Carsten Bange | Founder & CEO Contact As founder and CEO, Dr. Carsten Bange has built BARC into Europe’s leading mar-ket analysis and consulting firm for data & analytics over the past 25 years. Withhis team of 50 people, he helps companies make the strategic, organizational andtechnological decisions that ensure their successful transformation into data- andanalytics-driven organizations. Mail: cbange@barc.com www.barc.com Social Media:LinkedIn Dr. Bange is considered one of the leading experts on the technology market and thebeneficial use of data & analytics, which makes him a sought-after speaker, authorand consultant for companies, software vendors and service providers as well asinvestors. Timm Grosser | Senior Analyst Data & Analytics Contact Timm Grosser is a Senior Analyst Data & Analytics at BARC with a focus on datastrategy, data governance and data management. His core expertise is the defini-tion and implementation of data & analytics strategy, organization, architecture andsoftware selection. Mail: tgrosser@barc.com www.barc.com Social Media:LinkedIn He is a popular speaker at conferences and seminars and has authored numerousBARC studies and articles. Executive Summary������������������������������������������������������������������������������������������������������� 5Survey Results���������������������������������������������������������������������������������������������������������������� 8Data Sovereignty Has Become a Strategic Imperative...................................................................................9North America Rates Sovereignty Higher.......................................................................................................12External Drivers Are Shifting From “Rules” to “Risk”.....................................................................................14Internal Drivers: Data and AI Are Raising the Stakes....................................................................................16Maturity: Ambition Is High, Execution Is Uneven..........................................................................................18Sovereignty Becomes Real: Security First, Cloud Strategy in Transition....................................................20Challenges: People Issues Continue – While Technical Hurdles Surge in 2026........................................24Recommendations������������������������������������������������������������������������������������������������������ 26Methodology���������������������������������������������������������������������������������������������������������������� 29About BARC������������������������������������������������������������������������������������������������������������������ 31Sponsor Profile������������������������������������������������������������������������������������������������������������ 33Perforce Delphix.................................................................................................................................................34 Foreword While regulatory requirements remain a baseline driver, this researchshows that organizations are increasingly reframing data sovereignty asa broader risk-management imperative. Security, resilience, cloud de-pendency, and operational continuity are now central considerations.Leading organizations are responding by embedding compliance and se-curity directly into their data architectures: reducing friction, shorteningapproval cycles, and enabling innovation to scale safely. Data sovereignty has gone from a regulatory obligation to a stra-tegic imperative whose importance is rising quickly as AI raises thestakes. The findings in this new research from BARC underscore areality many leaders already experience: operating (and innovating)at scale increasingly depends on the ability to maintain control, trust,and compliance across data estates that span hybrid and multicloudenvironments. Data sovereignty challenges abound. Legislation like the CLOUD Acthas redefined sovereignty to include not only where data resides, butalso under whose laws the platform that houses the data operates.Companies often find themselves reexamining their public cloud orcloud-first strategies as a result. At Perforce Delphix, we see data sovereignty as an enabler of innovationrather than a constraint. When teams have self-service access to trusted,policy-governed data, they can move faster and with greater confidence.Delivering AI-ready data securely and compliantly across hybrid and multi-cloud environments allows enterprises to innovate responsibly withoutsacrificing control. Regulatory fragmentation from country to country has created suchlegal incoherence around data sovereignty that laws conflict not onlyfrom country to country, but sometimes even in the same jurisdic-tion. Local storage mandates, cross-jurisdiction transfer restrictions,restrictions on certain bulk sensitiv