Lawyer Russell Stanley Geronimo cautioned, however, that while the order institutionalizes local data-storage requirements, it does not necessarily insulate government information held by US cloud service providers from lawful disclosure demands issued by foreign authorities.