Kedaulatan Data sebagai Kuasa Strategik Negara: Perbandingan 79 Negara dan Kerangka Strategik bagi Malaysia

Data Sovereignty as State Strategic Power: A Comparison of 79 Countries and a Strategic Framework for Malaysia

Penulis

  • Qamarul Nazrin Harun Universiti Teknologi MARA (UiTM)

DOI:

https://doi.org/10.47548/ijistra.2026.129

Kata Kunci:

Kedaulatan data, Tadbir urus data, Ketahanan digital, Dasar Digital Malaysia, Aliran data rentas sempadan

Abstrak

Kajian ini meneliti kedaulatan data sebagai bentuk kuasa strategik negara dengan menganalisis bagaimana negara menentukan tujuan, mengawal akses dan infrastruktur, mengurus pergantungan teknologi serta menggunakan data bagi memenuhi kepentingan nasional. Kajian ini didorong oleh perkembangan wacana dan dasar kedaulatan data di Malaysia yang semakin melangkaui persoalan penyetempatan (localisation) data dan pematuhan peraturan kepada isu bidang kuasa, keselamatan, tadbir urus, infrastruktur dan perkongsian data. Namun demikian, perkembangan tersebut masih memerlukan suatu kerangka yang menghubungkan dimensi-dimensi tersebut dengan persoalan keupayaan negara untuk mencapai kedaulatan data. Persoalan ini semakin penting apabila negara bergantung pada infrastruktur awan, perisian, rangkaian dan teknologi analitik yang dikendalikan merentasi sempadan negara. Kajian menggunakan analisis dokumen secara perbandingan terhadap 79 negara yang merangkumi ASEAN, G7, BRICS dan OIC, serta Kesatuan Eropah sebagai kes serantau. Analisis mengenal pasti tujuan strategik, mekanisme pelaksanaan, penggunaan data dan batas pelaksanaan sebelum mengelompokkan strategi berdasarkan orientasi dominan. Dapatan menunjukkan tujuh orientasi utama kedaulatan data, iaitu Dominasi Digital, Kuasa Kawal Selia, Keterhubungan Strategik, Kawalan Negara, Autonomi Teknologi, Keupayaan Negara dan Ketahanan Digital. Perbandingan menunjukkan bahawa instrumen yang sama, seperti awan kerajaan, identiti digital dan pertukaran data, boleh menghasilkan bentuk kuasa yang berbeza bergantung pada susunan institusi, teknologi, pasaran dan hubungan antarabangsa. Kajian ini mengukuhkan pemahaman tentang kedaulatan data yang menghubungkan kawalan berdaulat, autonomi teknologi, keupayaan institusi, tadbir urus, ketahanan perkhidmatan, ekosistem data dan kerjasama rentas sempadan. Kajian ini juga mencadangkan kerangka kedaulatan data bagi Malaysia dengan menyediakan asas konseptual yang lebih berorientasikan keupayaan negara dan relevan dengan cabaran kebergantungan digital Malaysia.

 

This study examines data sovereignty as a form of strategic state power by analysing how countries define the purposes of data use, control access and infrastructure, manage technological dependencies, and leverage data to advance national interests. The study is motivated by the evolving discourse and policies on data sovereignty in Malaysia, which increasingly extend beyond data localisation and regulatory compliance to encompass issues of jurisdiction, security, governance, infrastructure, and data sharing. Nevertheless, these developments highlight the need for a framework that connects these dimensions to the broader question of national capacity to achieve data sovereignty. This question has become increasingly significant as countries rely on cloud infrastructure, software, networks, and analytical technologies operated across national borders. The study employs a comparative document analysis of 79 countries representing ASEAN, the G7, BRICS, and the Organisation of Islamic Cooperation (OIC), with the European Union examined as a separate regional case. The analysis identifies strategic objectives, implementation mechanisms, data utilisation practices, and implementation constraints before categorising national strategies according to their dominant orientations. The findings reveal seven major orientations of data sovereignty which are Digital Dominance, Regulatory Power, Strategic Connectivity, State Control, Technological Autonomy, State Capacity, and Digital Resilience. The comparative analysis demonstrates that similar instruments, such as government cloud infrastructure, digital identity systems, and data exchange platforms, can produce different forms of power depending on institutional arrangements, technological capabilities, market structures, and international relations. This study advances the understanding of data sovereignty by integrating sovereign control, technological autonomy, institutional capacity, governance, service resilience, data ecosystems, and cross-border cooperation. It further proposes a data sovereignty framework for Malaysia, providing a conceptual foundation that places greater emphasis on national capacity and addresses the challenges arising from Malaysia’s digital dependencies.

 

Unduhan

Data unduhan belum tersedia.

Referensi

Abbas, A. E., van Velzen, T., Ofe, H., van de Kaa, G., Zuiderwijk, A., & de Reuver, M. (2024). Beyond control over data: Conceptualizing data sovereignty from a social contract perspective. Electronic Markets, 34, Artikel 20. https://doi.org/10.1007/s12525-024-00695-2

ANSSI. (n.d.). FAQ avant de se lancer dans la qualification SecNumCloud. https://cyber.gouv.fr/enjeux-technologiques/cloud/faq-qualification-secnumcloud/

Blancato, F. G. (2024). The cloud sovereignty nexus: How the European Union seeks to reverse strategic dependencies in its digital ecosystem. Policy & Internet, 16(1), 12–32. https://doi.org/10.1002/poi3.358

Bowen, G. A. (2009). Document analysis as a qualitative research method. Qualitative Research Journal, 9(2), 27–40. https://doi.org/10.3316/QRJ0902027

Carroll, S. R., Garba, I., Figueroa-Rodríguez, O. L., Holbrook, J., Lovett, R., Materechera, S., Parsons, M., Raseroka, K., Rodriguez-Lonebear, D., Rowe, R., Sara, R., Walker, J. D., Anderson, J., & Hudson, M. (2020). The CARE Principles for Indigenous Data Governance. Data Science Journal, 19, Artikel 43. https://doi.org/10.5334/dsj-2020-043

Centre of Research for Cyber Security & Network (CSNET). (2024, Disember 11). Digital sovereignty and cybersecurity: Insights from Bicara Naratif. Universiti Malaya. https://csnet.um.edu.my/news/2024dec11-bicara-naratif-kedaulatan-digital.html

Chander, A., & Lê, U. P. (2015). Data Nationalism. Emory Law Journal, 64(3), 677–739. https://scholarlycommons.law.emory.edu/elj/vol64/iss3/2/

Cloudflare. (2025). Nationwide Internet shutdown in Afghanistan extends localized disruptions. https://blog.cloudflare.com/nationwide-internet-shutdown-in-afghanistan/

Collier, D., LaPorte, J., & Seawright, J. (2012). Putting typologies to work: Concept formation, measurement, and analytic rigor. Political Research Quarterly, 65(1), 217–232. https://doi.org/10.1177/1065912912437162

Couture, S., & Toupin, S. (2019). What does the notion of “sovereignty” mean when referring to the digital? New Media & Society, 21(10), 2305–2322. https://doi.org/10.1177/1461444819865984

Cyberspace Administration of China. (2024). Questions and answers on Provisions on Promoting and Regulating Cross-border Data Flows [Terjemahan tajuk]. https://www.cac.gov.cn/2024-03/22/c_1712776611649184.htm

Department for Digital Transformation. (2021). The Italian Cloud Strategy. https://innovazione.gov.it/notizie/articoli/en/the-italian-cloud-strategy/

Department for Science, Innovation and Technology. (2026). AI firms pioneering drug discovery, cheaper supercomputing and more get first backing through UK’s Sovereign AI. https://www.gov.uk/government/news/ai-firms-pioneering-drug-discovery-cheaper-supercomputing-and-more-get-first-backing-through-uks-sovereign-ai

Department of Communications and Digital Technologies. (2024). National Policy on Data and Cloud 2024, Notice 2533. https://www.gov.za/sites/default/files/gcis_document/202406/50741gen2533.pdf

Digital Agency. (2024). Data Free Flow with Trust (DFFT). https://www.digital.go.jp/en/policies/dfft

Digital Agency. (2026). Government Cloud. https://www.digital.go.jp/en/policies/gov_cloud

Digital Government Development Agency. (2024). ผลการดำเนินงานที่สำคัญ ในปีงบประมาณ พ.ศ. 2567. https://www.dga.or.th/wp-content/uploads/2025/10/ข้อมูลสถิติ-ณ-30-กย-2567.pdf

DINUM / French Government. (2023). La doctrine de l’État — Cloud au centre. https://www.numerique.gouv.fr/offre-accompagnement/cloud-administrations/la-doctrine-cloud-etat/

Dipartimento per la trasformazione digitale. (2026). PNRR: centrati gli obiettivi europei con 13mila PA in cloud. https://innovazione.gov.it/notizie/articoli/pnrr-centrati-gli-obiettivi-europei-con-13mila-pa-in-cloud/

E-Government National Centre. (n.d.). One Government Private Cloud. https://www.egnc.gov.bn/one-government-private-cloud/

Edler, J., Blind, K., Kroll, H., & Schubert, T. (2023). Technology sovereignty as an emerging frame for innovation policy. Defining rationales, ends and means. Research Policy, 52(6), Artikel 104765. https://doi.org/10.1016/j.respol.2023.104765

European Commission. (2025). Commission finds Apple and Meta in breach of the Digital Markets Act. https://digital-markets-act.ec.europa.eu/commission-finds-apple-and-meta-breach-digital-markets-act-2025-04-23_en

European Commission. (2026, June 3). Proposal for the Cloud and AI Development Act (CADA). https://digital-strategy.ec.europa.eu/en/library/proposal-cloud-and-ai-development-act-cada

European Commission. (n.d.). Common European data spaces. https://digital-strategy.ec.europa.eu/en/policies/data-spaces

European Parliament and Council. (2016). General Data Protection Regulation. https://eur-lex.europa.eu/eli/reg/2016/679/oj

European Parliament and Council of the European Union. (2023). Regulation (EU) 2023/2854 (Data Act). https://eur-lex.europa.eu/eli/reg/2023/2854/oj

Farrell, H., & Newman, A. L. (2019). Weaponized Interdependence: How Global Economic Networks Shape State Coercion. International Security, 44(1), 42–79. https://doi.org/10.1162/isec_a_00351

Federal Ministry for Economic Affairs and Climate Action. (2024). About Manufacturing-X: The global initiative to expand industrial data ecosystems. https://www.bmwk.de/Redaktion/EN/Dossier/Manufacturing-x/about-manufacturing-x.html

Federal Ministry of Communications, Innovation and Digital Economy. (2026). Federal Government Unveils National Digital Cloud Policy to Drive Investment, Digital Sovereignty and Government Transformation. https://fmcide.gov.ng/federal-government-unveils-national-digital-cloud-policy-to-drive-investment-digital-sovereignty-and-government-transformation/

Government of Guinea-Bissau. (2025). Decree No. 10/2025 approving ENTD.GW. https://www.informea.org/en/content/legislation/decree-no-102025-approving-national-strategy-digital-transformation-entdgw

Government of Timor-Leste. (2023). Governo lança plano estratégico Timor Digital 2032 para impulsionar o desenvolvimento digital e tecnológico nacional. https://timor-leste.gov.tl/?lang=pt&p=32649&print=1

GovTech Singapore. (2025). Government on Commercial Cloud (GCC). https://www.tech.gov.sg/products-and-services/for-government-agencies/software-development/government-on-commercial-cloud/?trk=public_profile_certification-title

Harun, Q. N. (2025). Menilai semula kedaulatan data Malaysia: Kritikan struktural terhadap Akta Perkongsian Data 2025. International Journal of Interdisciplinary and Strategic Studies, 6(10), 631–657. https://doi.org/10.47548/ijistra.2025.98

Hummel, P., Braun, M., Tretter, M., & Dabrock, P. (2021). Data sovereignty: A review. Big Data & Society, 8(1), 1–17. https://doi.org/10.1177/2053951720982012

IBM and SDAIA. (2024). SDAIA launches ALLaM on watsonx [Tajuk ringkas pengumuman kerjasama IBM–SDAIA]. https://mea.newsroom.ibm.com/sdaia-launches-allam-on-watsonx

IndiaAI / MeitY. (n.d.). IndiaAI Compute Portal: End Users. https://compute.indiaai.gov.in/endusers

Innovation, Science and Economic Development Canada. (2024). Canada to drive billions in investments to build domestic AI compute capacity at home. https://www.canada.ca/en/innovation-science-economic-development/news/2024/12/canada-to-drive-billions-in-investments-to-build-domestic-ai-compute-capacity-at-home.html

International Energy Agency. (2026). Key questions on energy and AI. https://www.iea.org/reports/key-questions-on-energy-and-ai

Jabareen, Y. (2009). Building a conceptual framework: Philosophy, definitions, and procedure. International Journal of Qualitative Methods, 8(4), 49–62. https://doi.org/10.1177/160940690900800406

Jabatan Digital Negara. (n.d.). MyGovCloud. https://www.mygovcloud.gov.my/mygovcloud

Jansen, B., Kadenko, N., Broeders, D., van Eeten, M., Borgolte, K., & Fiebig, T. (2023). Pushing boundaries: An empirical view on the digital sovereignty of six governments in the midst of geopolitical tensions. Government Information Quarterly, 40(4), Artikel 101862. https://doi.org/10.1016/j.giq.2023.101862

Jasanoff, S., & Kim, S.-H. (2009). Containing the atom: Sociotechnical imaginaries and nuclear power in the United States and South Korea. Minerva, 47(2), 119–146. https://doi.org/10.1007/s11024-009-9124-4

Kao, K. H. (2026, September 7). ASEAN’s vision for regional integration and the opportunities ahead for deeper economic cooperation. Ucapan utama, 2026 DEFA Foresight and Strategic Cooperation Pre-Summit Forum, Hong Kong, China. ASEAN Secretariat. https://asean.org/wp-content/uploads/2026/09/Speech-DEFA-Forum_final.pdf

Kelton, M., Sullivan, M., Rogers, Z., Bienvenue, E., & Troath, S. (2022). Virtual sovereignty? Private internet capital, digital platforms and infrastructural power in the United States. International Affairs, 98(6), 1977–1999. https://doi.org/10.1093/ia/iiac226

Kementerian Digital. (2025). National Cloud Computing Policy. https://www.digital.gov.my/api/file/file/FINAL%20-%20MALAYSIA%E2%80%99S%20NATIONAL%20CLOUD%20COMPUTING%20POLICY%20(MNCCP).pdf

Kementerian Komunikasi dan Informatika. (2024). Percepat Integrasi Layanan Publik, Presiden Luncurkan INA Digital Jadi GovTech. https://www.komdigi.go.id/berita/pengumuman/detail/percepat-integrasi-layanan-publik-presiden-luncurkan-ina-digital-jadi-govtech

MCIT / ATRA under the de facto authorities. (2024). Monitoring the filtering of blocked applications and immoral websites of telecommunications companies in Kabul province [translated title]. https://mcit.gov.af/dr/node/9001

Milan, S., & Treré, E. (2019). Big Data from the South(s): Beyond data universalism. Television & New Media, 20(4), 319–335. https://doi.org/10.1177/1527476419837739

Ministry of Defence. (2021). Data strategy for Defence. https://www.gov.uk/government/publications/data-strategy-for-defence/data-strategy-for-defence

Ministry of Electronics & IT / Press Information Bureau. (2026). Digital Public Infrastructure Strengthens Inclusive Governance by Expanding Access to Digital Services, Financial Inclusion and Last-Mile Service Delivery. https://www.pib.gov.in/PressReleasePage.aspx?PRID=2291148&lang=2&reg=48

Ministry of Energy, Trade and Industry Singapore. (2026). Digital Economy Agreements (DEAs). https://www.meti.gov.sg/trade-international-economic-relations/agreements/digital-economy-agreements-dea/

Ministry of Information Myanmar. (2025). Cybersecurity Law State Administration Council Law No. 1/2025. https://www.moi.gov.mm/moi%3Aeng/index.php/news/16633

Ministry of Management and Innovation in Public Services. (2024). Gestão assina acordos com Serpro e Dataprev para criação de Nuvem de Governo. https://www.gov.br/gestao/pt-br/assuntos/noticias/2024/novembro/gestao-assina-acordos-com-serpro-e-dataprev-para-criacao-de-nuvem-de-governo

Ministry of Public Security of Viet Nam. (2026). Chuẩn hóa công tác quản lý, xác thực tài khoản và bảo vệ an ninh mạng trên không gian số. https://mps.gov.vn/chinh-sach-phap-luat/bai-viet/chuan-hoa-cong-tac-quan-ly-xac-thuc-tai-khoan-va-bao-ve-an-ninh-mang-tren-khong-gian-so-1788941772

Ministère de la Transition Digitale, des Postes et des Communications Électroniques. (2026). 2025, l'année des fondations de la souveraineté numérique. https://www.mdenp.gov.bf/details?cHash=d338292cf46fbbaf6a65ede74573a1ee&tx_news_pi1%5Baction%5D=detail&tx_news_pi1%5Bcontroller%5D=News&tx_news_pi1%5Bnews%5D=1136

Mitchell, A. D., & Samlidis, T. (2021). Cloud services and government digital sovereignty in Australia and beyond. International Journal of Law and Information Technology, 29(4), 364–394. https://doi.org/10.1093/ijlit/eaac003

MTCIT. (n.d.). Government Cloud Services. https://mtcit.gov.om/services-5/services-13/services-92/government-cloud-services-361

National Data Administration. (2024). Data Elements × Three-Year Action Plan 2024–2026 [Terjemahan tajuk]. https://www.nda.gov.cn/sjj/zwgk/zcfb/0830/20240830174038137859023_pc.html

National Enterprise Architecture, Bahrain. (2017). Cloud First Policy (Version 1.0). https://nea.gov.bh/Documents/CloudFirstPolicy.pdf

National Planning Council. (2024). National Data Policy V1.0. https://www.npc.qa/en/nationaldataprogram/Documents/EnNationalDataPolicy.pdf

NIRA. (2025). Somalia Showcases Progress on National ID at ID4Africa 2025 Annual Conference. https://nira.gov.so/news/somalia-showcases-progress-on-national-id-at-id-4-africa-2025-annual-conference

Padmanabhan, R., Dainotti, A., Fatemi, N., Filastò, A., Xynou, M., & Basso, S. (2019). Iran’s nation-wide Internet blackout: Measurement data and technical observations. https://ooni.org/post/2019-iran-internet-blackout/

Personal Data Protection Commissioner. (2025). Personal Data Protection Guidelines No. 3/2025 Cross Border Personal Data Transfer. https://www.pdp.gov.my/ppdpv1/wp-content/uploads/2025/08/GP_CBPDT_EN.pdf

Pohle, J., & Thiel, T. (2020). Digital sovereignty. Internet Policy Review, 9(4). https://doi.org/10.14763/2020.4.1532

Primature Djibouti. (2026). Discours de politique générale du Premier Ministre. https://primature.gouv.dj/discours-de-politique-generale-du-premier-ministre-abdoulkader-kamil-mohamed-a-loccasion-de-la-session-ordinaire-de-lassemblee-nationale-1er-mars-2026/

Présidence du Sénégal. (2025). New Deal Technologique: Une ambition nationale pour faire du Sénégal un leader de l’économie numérique en Afrique. https://www.presidence.sn/fr/actualites/new-deal-technologique-une-ambition-nationale-pour-faire-du-senegal-un-leader-de-leconomie-numerique-en-afrique/

Royal Government of Cambodia. (2022). Cambodia Digital Government Policy 2022–2035. https://asset.cambodia.gov.kh/mptc/2022/04/Cambodia_Digital_Government_Policy_2022_2035_English.pdf

SABA (Aden). (2024). New TeleYemen data centre launched in Aden [Terjemahan tajuk]. https://www.sabanew.net/story/ar/120169

SABA (Aden). (2025). Minister Badhib launches Starlink device and service sales points [Terjemahan tajuk]. https://www.sabanew.net/story/ar/132499

SANA. (2026a). Syria accelerates nationwide digital transformation across public institutions. https://sana.sy/en/syria/2309482/

SANA. (2026b). Syria’s digital health portal surpasses 118,000 visits in first two months. https://sana.sy/en/health/2323835/

Saudi Data & AI Authority. (2020). National Strategy for Data & AI. https://sdaia.gov.sa/en/SDAIA/SdaiaStrategies/Pages/NationalStrategyForDataAndAI.aspx

Saudi Press Agency. (2025). SDAIA lists ALLaM 7B on Hugging Face [Terjemahan ringkas tajuk]. https://www.spa.gov.sa/fr/N2276674

Synergy Research Group. (2026). GenAI Helps Drive Quarterly Cloud Revenues to $119 Billion as Growth Rate Jumped Yet Again in Q4. https://www.srgresearch.com/articles/genai-helps-drive-quarterly-cloud-revenues-to-119-billion-as-growth-rate-jumped-yet-again-in-q4

TATOLI state news agency. (2026). Timor-Leste launches commercial operations of submarine cable to boost digital connectivity. https://en.tatoli.tl/2026/07/28/timor-leste-launches-commercial-operations-of-submarine-cable-to-boost-digital-connectivity/18/

Taylor, L. (2017). What is data justice? The case for connecting digital rights and freedoms globally. Big Data & Society, 4(2), 1–14. https://doi.org/10.1177/2053951717736335

UN ESCAP. (2026). Update of the readiness assessment for cross-border paperless trade: Lao People’s Democratic Republic. https://www.laotradeportal.gov.la/upload/files/art_lo_la_20260609113041.pdf

UN Secretary-General. (2025). The situation in Afghanistan and its implications for international peace and security, A/80/556–S/2025/789. https://documents.un.org/api/symbol/access?l=en&s=S/2025/789&t=pdf

UNAMA and OHCHR. (2025). Out of reach: The impact of telecommunications shutdowns on the Afghan people. https://www.ecoi.net/en/file/local/2132989/english_-_out_of_reach_-_october_2025.pdf

UNDP. (2025). UNDP Guinea-Bissau Newsletter October–December 2025. https://www.undp.org/sites/g/files/zskgke326/files/2026-02/undp_g.b_newsletter_oct-dec_2025_eng.pdf

United Nations Conference on Trade and Development. (2021). Digital Economy Report 2021: Cross-border data flows and development: For whom the data flow. https://unctad.org/publication/digital-economy-report-2021

US Department of Justice, National Security Division. (2025). Data Security. https://www.justice.gov/nsd/data-security

Viet Nam Government News. (2025). National Data Center No. 1 opens in Ha Noi. https://en.baochinhphu.vn/national-data-center-no-1-opens-in-ha-noi-111250819164321883.htm

Viet Nam Government News. (2026). Gov’t approves national data strategy. https://en.baochinhphu.vn/govt-approves-national-data-strategy-111260720100743085.htm

Walter, M., & Suina, M. (2019). Indigenous data, indigenous methodologies and indigenous data sovereignty. International Journal of Social Research Methodology, 22(3), 233–243. https://doi.org/10.1080/13645579.2018.1531228

White House. (2025). Promoting the Export of the American AI Technology Stack, Executive Order 14320. https://www.whitehouse.gov/presidential-actions/2025/07/promoting-the-export-of-the-american-ai-technology-stack/

World Bank. (2025). GovTech Dataset (December 2025) [Data set]. https://datacatalog.worldbank.org/search/dataset/0037889/govtech-dataset

Xue, D., Mixon-Baca, B., ValdikSS, Ablove, A., Kujath, B., Crandall, J. R., & Ensafi, R. (2022). TSPU: Russia’s Decentralized Censorship System. In Proceedings of the 22nd ACM Internet Measurement Conference (pp. 179–194). Association for Computing Machinery. https://doi.org/10.1145/3517745.3561461

ZenDiS. (2024). ZenDiS launcht openDesk auf der Smart Country Convention 2024. https://www.zendis.de/newsroom/presse/zendis-launcht-opendesk-auf-der-smart-country-convention-2024

##submission.downloads##

Diterbitkan

2026-10-30

Cara Mengutip

Harun, Q. N. (2026). Kedaulatan Data sebagai Kuasa Strategik Negara: Perbandingan 79 Negara dan Kerangka Strategik bagi Malaysia: Data Sovereignty as State Strategic Power: A Comparison of 79 Countries and a Strategic Framework for Malaysia. International Journal of Interdisciplinary and Strategic Studies, 7(13), 782-809. https://doi.org/10.47548/ijistra.2026.129