Storage system, data transfer control method, and data transfer control program

A data transfer control method executed by a storage system including a storage apparatus for storing data,

• the storage system including a processor, and a memory unit configured to store data transfer availability information in which sensitive data and a transfer permission and rejection region of the sensitive data are associated with each other,
• the data transfer control method comprising:
• when receiving a transfer instruction to transfer a predetermined memory area unit stored in the storage apparatus to another storage apparatus located in another region different from a region located with the storage apparatus,
• determining, by the processor with reference to the data transfer availability information, whether the other region according to the transfer instruction is included in the transfer permission and rejection region that is associated with the sensitive data stored in the predetermined memory area unit according to the transfer instruction;
• and
• performing or preventing, by the processor, transfer of the predetermined memory area unit to the other storage apparatus according to a determination result of whether the other region is included in the transfer permission and rejection region.

A data transfer control program for executing data transfer control on data stored in a storage apparatus, the data transfer control program causing a computer to execute:

• when receiving a transfer instruction to transfer a predetermined memory area unit stored in the storage apparatus to another storage apparatus located in another region different from a region located with the storage apparatus,
• determining, with reference to data transfer availability information in which sensitive data and a transfer permission and rejection region of the sensitive data are associated with each other, whether the other region serving as a transfer destination according to the transfer instruction is included in the transfer permission and rejection region that is associated with the sensitive data stored in the predetermined memory area unit according to the transfer instruction;
• and
• performing or preventing transfer of the predetermined memory area unit to the other storage apparatus according to a determination result of whether the other region is included in the transfer permission and rejection region.