A real estate corporation is utilizing file storage in a Platform as a Service (PaaS). They are consulting with their lawyers to determine how data must be protected given the laws that they must comply with. If the data is stored with the European Union (EU) region, what law or regulation would the data be governed by?