Both, and likely not "new" legal bullshit.
Each country has their own laws, regulations, and, where applicable, bribery/political schemes when it comes to hosting international businesses collecting data. A company would have to dedicate legel and administrative teams to get that going in each...