What is a serious complication an organization faces from the compliance perspective with international operations?

When an organization operates internationally, it becomes subject to the laws and regulations of each country or jurisdiction in which it does business or where its data resides. These jurisdictions often have conflicting or differing requirements for data protection, privacy, and breach notification (e.g., GDPR in Europe vs. CCPA in California). Navigating these multiple legal frameworks is a primary and serious compliance complication, as a failure to comply in one jurisdiction can lead to severe legal and financial penalties. This issue, often termed data sovereignty, is a fundamental challenge in global cloud adoption.

B. Different certifications are a symptom of operating in multiple jurisdictions, not the root cause of the compliance complication itself.

C. Different operational procedures are often implemented to address the compliance requirements of multiple jurisdictions; they are a consequence, not the core problem.

D. Different capabilities of cloud providers in various regions are an operational or technical constraint, not the primary compliance complication itself.

1. Cloud Security Alliance. (2017). Security Guidance for Critical Areas of Focus in Cloud Computing v4.0. Page 45, Domain 4: "Cloud Computing Compliance and Audit Management," discusses the complexities of "conflicting requirements of different jurisdictions."

2. Subashini, S., & Kavitha, V. (2011). A survey on security issues in service delivery models of cloud computing. Journal of Network and Computer Applications, 34(1), 1-11. https://doi.org/10.1016/j.jnca.2010.07.006. The paper discusses legal issues, including data being subject to the laws of the country where it is stored (p. 9).