Location is not the only requirement, but it matters for GDPR transfers and institutional policy.
EU data residency reduces transfer risk and simplifies GDPR compliance for personal or sensitive data, but the exam trap is assuming location alone guarantees compliance.