Question

A European healthcare provider is moving patient records to Google Cloud. Regulations require that this data physically remains stored within the European Union, and the compliance team wants assurance that Google will not move the stored data outside that boundary. Which Google Cloud capability directly addresses this requirement?

Accepted Answer

Selecting a specific EU region when creating storage resources to control data residency

Answer

Enabling default encryption at rest for all stored data

Answer

Applying IAM least-privilege roles to limit who can access the data

Answer

Turning on Access Transparency logs to monitor Google administrator actions