The Location of the Cloud
We use metaphors like "The Cloud" to obscure the physical reality of the internet. The internet is made of undersea cables, cooling fans, and diesel generators. Data Sovereignty reminds us that these physical objects exist on soil.
If your medical records are stored on a server in Virginia, they are subject to the US PATRIOT Act, regardless of whether you are a German citizen. This realization has led to the "Splinternet"—the fragmentation of the web into national silos.
Indigenous Data Sovereignty (IDS)
The most advanced thinking on this topic comes from Indigenous communities (e.g., Māori, First Nations). They argue that data is a natural resource, like water or land. The OCAP Principles (Ownership, Control, Access, Possession) assert that Indigenous data must be governed by Indigenous laws, not just corporate Terms of Service.
- Data is Kin: Information about a community's DNA or sacred sites is not just "content"; it is a digital relative that must be treated with respect.
- Refusal: The right to say "no" to research or data collection that extracts value without returning benefit.
Field Notes
The "Cloud Act" Conflict: The US CLOUD Act allows US law enforcement to demand data from American tech companies (Google, AWS) even if that data is stored overseas. This directly conflicts with the EU's GDPR, creating a "legal singularity" where complying with one law means breaking another.
Sovereignty-by-Design: New architectural models are emerging where encryption keys are held by the user, not the provider. This means that even if a government subpoenas the server, the host cannot read the data. This shifts sovereignty from the State to the Individual.
Ephemera
The ultimate act of Data Sovereignty is the "Local-First" movement (see: Local-First). If the data lives on your device, you are the sovereign. If it lives on a server, you are a tenant.