Question

A project manager is implementing a new customer records system for a healthcare client operating in Germany. During vendor selection, the client's legal team states that all patient data must be stored and processed exclusively within the European Union and never transferred to servers outside that region. One shortlisted cloud vendor offers the lowest price but replicates data across data centers in the United States and Asia for redundancy. What should the project manager do FIRST?

Accepted Answer

Confirm the data residency requirement with the legal team and eliminate vendors that cannot guarantee EU-only data storage

Answer

Select the lowest-cost vendor because redundancy improves system availability for patients

Answer

Proceed with the vendor but add a clause to the SLA requiring 99.9% uptime

Answer

Escalate to the change control board to approve moving data outside the EU