Article 32h

ProhibitionConditions ofapplicable to localisation requirements for non-personal data within the Union

(1) Data localisation requirements for non-personal data shallmay be prohibited,imposed unlesswhere they are justified on grounds of public security in compliance with, the principleresilience and continuity of proportionalityessential services, a compelling legitimate interest, or laid down on the basisprotection of Unionnational lawand economic security.

(2) Member States shall immediately communicate to the Commission any draft act which introduces a new data localisation requirement or makes changes to an existing data localisation requirement in accordance with the procedures set out in Articles 5, 6 and 7 of Directive (EU) 2015/1535 of the European Parliament and of the Council.’