A hospital is building an AI diagnostic tool using patient records and medical images, and regulations require that sensitive patient data must not leave the country where it resides. Which data governance approach ensures compliance and protects patient privacy?

Data residency is the correct answer because it specifically addresses the requirement that data must remain within a defined geographical boundary, such as a country. This is crucial for complying with regulations like GDPR or HIPAA, which often mandate where sensitive patient data can be stored and processed. Data quality focuses on the accuracy, completeness, and consistency of data, which is important for the AI tool's effectiveness but doesn't directly address geographical storage restrictions. Data discoverability refers to the ease with which data can be found and accessed, which is a usability concern, not a compliance one regarding location. Data enrichment involves enhancing data with additional information, which is a processing step and unrelated to the physical location of the data.