Immigration law is cross-border by definition.
But so is the data.
Client matters often involve multiple jurisdictions—raising GDPR-type considerations. In some cases, including where services are offered to individuals in the EU, those frameworks may apply.