Legal frameworks for data sovereignty in German AI rulings