A key question is at the heart of China’s new cybersecurity law: Where should data live?