"We're not sure it is sound to do the math on this one and declare that a 34 per cent of 26 per cent means about eight per cent of people pulled data from clouds for fear of spying, because the exact nature of the samples isn't explained."
I can help here: it's not sound at all, especially as "others [sic] reasons for repatriating data or services included local laws, or greater comfort doing business with domestic providers." are supersets of the first reason.
If local laws have been changed to prevent US-based hosting, what are the reasons for that? If CIOs have greater comfort doing business with domestic providers, what are the reasons for that? Certainly if I were a CIO explaining why I had pulled US-based hosting, I'd be a lot more comfortable ticking one of the last two reasons.
What amazes me is that a full third of those respondents explicitly cited fear of spooks. This is almost certainly an underestimate: there's some very good motives for not stating this explicitly and hardly any for using it as an excuse to pull US-based hosting when it is done for some other reason.