> I'm not sure which laws they're basing this on, but it's not unusual to see countries differently. For example UK's DPA allows storing data in countries with

> I'm not sure which laws they're basing this on, but it's not unusual to see countries differently. For example UK's DPA allows storing data in countries with similar protection guarantees. I would expect that doesn't include China, but does include Germany. It's not the ICO that sets that rule, it's the GDPR (and prior to that, the Data Protection Directive)