It already is in practice. You can't legally use cloud services for "red" (personal information) or "black" (national security) data in most jurisdictions.

Some organizations that are deeply invested in a given tech provider do it anyway, but this is gradually going away.