Key Takeaways: Chapter 37 — Global South Perspectives on Data Governance
Core Takeaways
-
Data colonialism is a structural reality, not merely a metaphor. The extraction of data from populations in the Global South by corporations and institutions in the Global North replicates historical colonial patterns through concrete mechanisms: infrastructure dependency (cloud computing, undersea cables, operating systems controlled by Global North corporations), platform dominance (Facebook, Google, and Amazon as primary digital infrastructure in many Global South countries), unequal data flows (raw data extracted from the periphery, value captured at the center), and regulatory pressure (GDPR adequacy requirements shaping Global South legislation).
-
The Global South is not a passive recipient of governance frameworks — it is producing alternatives. The AU Data Policy Framework, India's digital public infrastructure model, Brazil's LGPD, and community data governance initiatives across Africa, Asia, and Latin America represent original governance contributions that address contexts and priorities not captured by GDPR-style frameworks. South-South learning — countries drawing on each other's experiences — is increasingly important.
-
India's Aadhaar system demonstrates both the promise and peril of large-scale digital identity. Aadhaar has expanded financial inclusion for hundreds of millions of people while simultaneously creating the world's largest biometric surveillance infrastructure. The system's exclusion errors have caused documented harm, including denial of food rations and pensions. The DPDP Act's government exemptions limit the effectiveness of data protection for Aadhaar-linked data. Aadhaar is being studied as a model by other countries, making its governance outcomes globally consequential.
-
Data governance frameworks designed for the Global North may not be appropriate for the Global South. Differences in institutional capacity, digital infrastructure, development priorities, and political context mean that direct transplantation of frameworks like the GDPR can produce laws that are formally compliant but practically ineffective. Contextual adaptation is necessary — but "context" must not become an excuse for lower standards.
-
Agricultural data governance in Africa illustrates data extractivism in practice. Data generated by smallholder farmers — about soil, crops, weather, and markets — is collected by international corporations and development organizations, aggregated and analyzed using Global North infrastructure, and monetized in ways that return minimal value to the farmers who generated it. Agricultural data cooperatives represent a governance alternative that addresses both the power asymmetry and the benefit-sharing deficit.
-
"Leapfrogging" is possible but conditional. Global South countries can potentially skip problematic governance patterns (corporate-dominated data extraction, surveillance-first identity systems, consent-as-theater) and move directly to more progressive models (data cooperatives, community governance, purpose-limited identity systems). But leapfrogging requires political will, institutional capacity, and viable alternatives that are technically feasible and economically sustainable.
-
Border surveillance illustrates data governance at the Global North-South boundary. Surveillance technologies deployed at borders — biometric collection, facial recognition, drone monitoring, digital device searches — represent the physical manifestation of data governance power asymmetries between nations. Border populations experience data governance not as a regulatory abstraction but as a daily reality of bodily intrusion.
-
Data sovereignty is a contested concept with multiple meanings. For some advocates, data sovereignty means data localization — requiring data to be stored within national borders. For others, it means governance control — ensuring that communities have meaningful authority over how their data is used, regardless of where it is stored. For indigenous peoples, data sovereignty extends to collective control over data about their communities, lands, and cultural heritage. These different meanings lead to different governance prescriptions.
Key Concepts
| Term | Definition |
|---|---|
| Data colonialism | The extraction of data from Global South populations by Global North corporations and institutions, replicating colonial patterns of resource extraction through digital infrastructure. |
| Digital extractivism | The systematic extraction of data value from populations in ways that parallel physical resource extraction — raw data taken from communities, processed elsewhere, with value accruing to those who control the processing. |
| Digital public infrastructure (DPI) | Government-built or government-supported digital systems (identity, payments, data sharing) that serve as shared infrastructure for public and private services. India's Aadhaar-UPI-DigiLocker stack is the leading example. |
| Aadhaar | India's biometric digital identity system, assigning a unique 12-digit number linked to fingerprints and iris scans to over 1.3 billion residents. |
| DPDP Act | India's Digital Personal Data Protection Act (2023), providing a data protection framework with notable exemptions for government agencies. |
| AU Data Policy Framework | The African Union's continental policy framework for data governance, emphasizing data sovereignty, development goals, and collective rights alongside individual protections. |
| LGPD | Brazil's Lei Geral de Protecao de Dados (2020), a comprehensive data protection law influenced by but not identical to the GDPR. |
| Data localization | The requirement that data generated within a country be stored on servers within that country's borders — a strategy for asserting data sovereignty with both benefits and risks. |
| Leapfrogging | The possibility that countries can skip established (and problematic) developmental stages and move directly to more advanced or equitable models. |
| Infrastructure dependency | Reliance on digital infrastructure (cloud, platforms, undersea cables) owned and operated by foreign entities, creating governance vulnerabilities. |
Key Debates
-
Is the GDPR a universal model or a context-specific one? The GDPR is the most influential data governance framework in the world, but it was designed for a context — the European Union — with specific institutional capacities, economic structures, and political traditions. Should Global South countries adopt GDPR-like frameworks, adapt them, or develop entirely different approaches?
-
Does data localization promote sovereignty or enable surveillance? Data localization can assert national governance authority over domestic data, but it can also be used by authoritarian governments to facilitate domestic surveillance, restrict cross-border information flows, and control the internet. The governance implications depend on who governs the localized data.
-
Can community data governance scale? Data cooperatives and commons-based governance work well at the local level. But scaling them — to the national or continental level — poses challenges of coordination, standardization, and interoperability. Can participatory governance compete with the efficiency of corporate and state-controlled systems?
-
Is "South-South learning" a real alternative or a subordinate form of the same dependency? When India exports its DPI model to Africa, is this genuine peer learning or a new form of governance influence by a regional power? How should the relationship between Global South countries in data governance be structured?
Looking Ahead
Chapter 37 examined how data governance operates differently — and often more inequitably — in the Global South. Chapter 38 shifts to the future, asking how governance frameworks must evolve to address technologies that do not yet fully exist. The power asymmetries, consent fictions, and accountability gaps documented in the Global South context will only intensify as quantum computing, brain-computer interfaces, and ambient intelligence reshape the data landscape.
Use this summary as a study reference. The Global South perspectives introduced here inform the participatory governance models of Chapter 39 and the capstone integration of Chapter 40.