As a wave of policy measures seeking to force the localization of data sweeps the globe, the potential impacts on cybersecurity have been largely overlooked. While data localization measures are often motivated by legitimate aims—including privacy, national security, or promoting domestic industries—these policies are increasingly posing significant challenges for cybersecurity defenders.