database location legislation