Digital Sovereignty vs. the Open Sky: The Policy Clash Between Data Localization and Global Cloud
In the 21st century, data is no longer just a collection of binary digits. It has already become the new fuel of the modern economy. But who should control this fuel? Should it remain in the hands of nation-states or should it be managed by tech giants? This question has sparked an intense policy and strategic conflict between data localization and global cloud computing. Today, policymakers, economists, and technologists across the world are deeply engaged in this debate, which sits at the forefront of national security, economic growth, and privacy.
Data localization refers to a legal requirement that data generated within a country must be stored and processed within its geographical boundaries. The primary objective is to make sure national security and protect local data from foreign interference.
Countries like Russia and China strictly follow such policies. For instance, Russia’s Federal Law No. 242-FZ mandates that Russian citizens’ personal data must be stored on servers within Russia. India is also moving in a similar direction through its proposed Digital Personal Data Protection (DPDP) Act, particularly for personal data that are sensitive. The core argument is not that complicated: when data is stored locally, law enforcement agencies can access it more promptly, avoiding complications tied to foreign jurisdictions—such as those arising from the United States’ CLOUD Act.
On the other hand, the global cloud model is built on efficiency. Companies such as Amazon (AWS), Microsoft (Azure), and Google Cloud distribute data across multiple infrastructures to ensure speed, redundancy, and reliability. Strict localization disrupts this efficiency.
Recent analyses by IDC, Statista, and Gartner indicate that the global datasphere, projected to exceed 175 zettabytes by 2025, has already gone beyond expectations. By early 2026, it will have approached nearly 200 zettabytes. Restricting the processing of such massive volumes of data within fixed geographical boundaries raises costs and slows down innovation. A study by the Information Technology and Innovation Foundation (ITIF) suggests that if countries like Vietnam adopt strict localization policies, their GDP could decline by 1.7% more or less. One major reason is that small and medium enterprises (SMEs) would lose access to affordable global cloud services, weakening their competitiveness in international markets.
This conflict can be understood across three key dimensions:
1. Legal jurisdiction and enforcement: In a global cloud environment, even users often don’t know where their data is stored physically. This creates complications during criminal investigations—especially when determining which country has legal authority over the data. The U.S. CLOUD Act allows American companies to provide data to U.S. authorities regardless of where the servers are located, which a lot of countries see as a direct challenge to their sovereignty.
2. Economic growth vs. security: Unrestricted data flow is essential for global trade. However, for developing countries like Bangladesh or India, concerns about “data colonialism” are growing. In simple terms, tech companies in places like Silicon Valley use data generated by users in these countries to develop advanced technologies like AI—yet the economic benefits rarely flow back to the local economies.
3. Privacy vs. surveillance: Interestingly, while localization can take care of data protection, it can also increase the state’s ability to monitor its citizens. When data is stored locally, governments gain easier access and control, sometimes at the cost of human rights and freedom of expression.
A 2023 report indicates that cloud adoption in Bangladesh is growing at an annual rate of around 25%. In this context, a balanced or hybrid approach seems most practical: allowing global cloud usage for general, non-sensitive data while developing local infrastructure for highly sensitive or security-related information.
Ultimately, the debate between data localization and global cloud is not just about technology—it is about power. One side envisions a borderless digital world; the other seeks control and ownership within national boundaries. In reality, no country can thrive in isolation. The way forward lies in building an international data-sharing framework—one that ensures the free flow of information while prioritizing digital sovereignty.
If data is the gold of the modern age, then the true challenge is not just guarding the mine but ensuring that this gold is used wisely, securely, and for the benefit of all.
(Sakif Shamim, FACHE, FLMI, Economist.
Managing Director, Labaid Cancer Hospital & Super Speciality Centre.
Deputy Managing Director, Labaid Group)
