Geographical spread of the data

[Alexey]

In regard of geographically stored data - yes, see Geofencing and advanced placement-constraint support #4227
However, the GDPR has much more than that.
See

Are there still certification requirements from large customers?

Yes, there are a number of compliant storage use cases we are evaluating (HIPAA/SOX/ISO/etc), but many require more direct agreements between us and Storage Node Operators. We are still working through details, but if Storage Node Operators themselves already know themselves to be compliant for some of these use cases, we would love to hear from you!