Nigel Cory, associate director for trade policy at the Information Technology and Innovation Foundation, described the Schrems II case and its aftermath as turning the General Data Protection Regulation (GDPR) “into the world’s largest de facto data localization framework.”