Is the GDPR a data localization law?

>