As someone in the US who has been in audits where we had to attest to where our data was stored, also wtf.

Oh reading the article it means non-US sovereignty. Pretty sure anybody in IT at this point should know the US privacy laws are non-existent and US companies are in this position and have been for decades.