There is an increasing need, fueled by new national regulations in Europe and Australia, for ISPs to ensure that personal information belonging to their users does not leave the country. It is unclear whether such regulations cover **data** in transit as well as storage, but **data** can certainly be sniffed while in transit, violating the original intent. Such regulations may place a substantial burden on ISPs to prove that such **data** remains within a country for its entire lifetime, even when it moves. It is still far from clear what the implications are on ISP operations. Currently we do not have the tools to monitor **data** in transit and state with confidence that **data** has not left a country, even briefly.