Data sovereignty

Data sovereignty is the idea that data are subject to the laws and governance structures of the nation where they are collected. The concept of data sovereignty is closely linked with data security, cloud computing, network sovereignty, and technological sovereignty. Unlike technological sovereignty, which is vaguely defined and can be used as an umbrella term in policymaking,[1] data sovereignty is specifically concerned with questions surrounding the data itself.[2] Data sovereignty as the idea that data is subject to the laws and governance structures within one nation is usually discussed in one of two ways: in relation to Indigenous groups and Indigenous autonomy from post-colonial states, or in relation to transnational data flow.[3] With the rise of cloud computing, many countries have passed various laws around the control and storage of data, which all reflect measures of data sovereignty.[2] More than 100 countries have some sort of data sovereignty laws in place.[4] With self-sovereign identity (SSI), the individual identity holders can fully create and control their credentials, although a nation can still issue a digital identity in that paradigm.[5]

  1. ^ Maurer, Tim; Morgus, Robert; Skierka, Isabel; Hohman, Mirko (November 2014). "Technological Sovereignty: Missing the Point?" (PDF). digitaldebates.org.
  2. ^ a b Irion, Kristina (1 December 2012). "Government Cloud Computing and National Data Sovereignty". Policy & Internet. 4 (3–4): 40–71. doi:10.1002/poi3.10. ISSN 1944-2866. S2CID 261812714.
  3. ^ Chander, Anupam; Sun, Haochen, eds. (2024). Data Sovereignty: From the Digital Silk Road to the Return of the State. Oxford, United Kingdom: Oxford University Press. Open access icon
  4. ^ "Gilmore, David, DataFleets, "Google Scrapped Cloud Initiative in China, Other Markets", Bloomberg News". Bloomberg News. 8 July 2020.
  5. ^ Kukutai, Tahu, and John Taylor. Indigenous Data Sovereignty: Toward an Agenda. ANU Press, 2016.