Data Sovereignty: India's Strategic Imperative in 2026

The internet was conceived as a global network transcending national boundaries, enabling free flow of information and commerce across borders. This vision of a unified, borderless digital space has shaped decades of technological development and international cooperation. However, this vision is fracturing. Nations increasingly assert sovereignty over their digital territories through data localization requirements, content restrictions, infrastructure controls, and internet shutdowns. This trend toward national control over digital space—often called "digital sovereignty"—threatens to fragment the global internet into national or regional networks, creating a "splinternet" where the internet experience varies dramatically by jurisdiction. As of 2026, this fragmentation accelerates, driven by geopolitical tensions, security concerns, economic protectionism, and competing visions of internet governance. This article examines digital sovereignty and the splinternet phenomenon, analyzing drivers of internet fragmentation, legal frameworks for data localization and content control, tensions between sovereignty and connectivity, India's approach to digital sovereignty, and implications for global digital commerce and human rights.

Understanding Digital Sovereignty

Digital sovereignty refers to nations' assertion of control over digital infrastructure, data, and content within their territories. This concept extends traditional territorial sovereignty into cyberspace, claiming that nations have the same rights to regulate digital activities within their borders as they do physical activities. Digital sovereignty manifests through various mechanisms including data localization laws requiring data to be stored within national borders, content regulation mandating removal or blocking of prohibited content, infrastructure requirements demanding local servers or network equipment, and internet governance asserting national control over internet resources and standards.

Proponents of digital sovereignty argue it protects national security by preventing foreign surveillance and espionage, safeguards privacy by subjecting data to domestic legal protections, enables law enforcement access to data for investigations and prosecutions, supports economic development by requiring local infrastructure investment, and preserves cultural values by controlling content that conflicts with national norms. These arguments resonate particularly in nations concerned about foreign technology dominance or surveillance.

Critics counter that digital sovereignty fragments the internet, undermines innovation by creating compliance burdens and market barriers, enables censorship and human rights violations by giving governments control over information, increases costs for businesses operating across borders, and reduces security by preventing global threat intelligence sharing. The debate reflects fundamental tensions between national control and global connectivity. The relationship with data sovereignty frameworks provides additional context.

The Splinternet: Internet Fragmentation

The splinternet describes the fragmentation of the global internet into national or regional networks with different rules, access, and content. This fragmentation occurs through technical, regulatory, and commercial mechanisms. Technical fragmentation involves nations creating separate internet infrastructure, routing, or protocols incompatible with global standards. Regulatory fragmentation creates different legal requirements for content, data, and services across jurisdictions. Commercial fragmentation sees companies offering different services or content by region to comply with local laws.

China's "Great Firewall" exemplifies advanced splinternet implementation, creating a largely separate internet ecosystem with domestic platforms replacing global services, extensive content filtering and censorship, and government control over infrastructure and data flows. Russia's "sovereign internet" law enables similar isolation, requiring domestic routing of Russian internet traffic and creating infrastructure for disconnection from the global internet. Iran, North Korea, and other nations implement varying degrees of internet isolation and control.

Even democracies contribute to fragmentation through data localization, content regulation, and platform liability laws that vary by jurisdiction. The EU's GDPR creates different data protection requirements than US or Asian frameworks. India's data localization proposals would require certain data to remain within India. And content regulation—from hate speech to misinformation to copyright—varies dramatically across jurisdictions, forcing platforms to implement region-specific content policies.

Data Localization: Legal Frameworks and Debates

Data localization laws require certain data to be stored, processed, or both within national borders. These laws vary in scope—some apply to all personal data, others only to sensitive categories like financial or health data. They vary in strictness—some prohibit cross-border transfers entirely, others allow transfers with safeguards. And they vary in enforcement—some are rigorously enforced, others remain largely symbolic.

India's approach to data localization has evolved through various proposals and regulations. The DPDP Act, 2023, does not mandate blanket data localization but empowers the government to designate certain data categories requiring localization. The RBI has mandated payment data localization, requiring payment system operators to store payment data exclusively in India. And sector-specific regulations in finance, telecommunications, and other domains impose varying localization requirements.

Arguments for data localization include sovereignty over citizens' data, law enforcement access for investigations, economic benefits from local data center investment, and protection from foreign surveillance. Arguments against include increased costs for businesses maintaining multiple data centers, reduced security from preventing global threat intelligence sharing, trade barriers conflicting with international obligations, and limited effectiveness as metadata and backups often cross borders anyway.

Content Regulation and Censorship

Nations increasingly regulate online content, requiring platforms to remove or block prohibited material. Content regulation targets vary—hate speech, misinformation, extremism, pornography, copyright infringement, and political dissent. Regulatory approaches vary from notice-and-takedown regimes requiring removal upon notification to proactive monitoring mandating platforms prevent prohibited content from appearing to geographic blocking restricting access by location.

India's IT Rules, 2021, establish content regulation frameworks for social media platforms and digital news publishers. These rules require platforms to remove content within specified timeframes when notified by authorities, appoint grievance officers and compliance personnel in India, and implement mechanisms for user complaints and content appeals. Critics argue these rules enable government censorship and chill free expression, while proponents contend they ensure accountability and protect users from harmful content.

The tension between content regulation and free expression is acute. While nations have legitimate interests in preventing illegal content, overly broad or vague content regulations enable censorship of political speech, journalism, and dissent. The lack of international consensus on content standards means platforms face conflicting requirements—content legal in one jurisdiction may be prohibited in another, forcing platforms to either implement the most restrictive standards globally or create region-specific content policies contributing to the splinternet.

Infrastructure Control and Technology Sovereignty

Digital sovereignty extends to physical and logical infrastructure—servers, cables, routers, protocols, and standards. Nations increasingly demand local infrastructure to ensure control and reduce foreign dependence. This includes requiring local data centers and servers for certain services, mandating use of domestic technology or excluding foreign vendors from critical infrastructure, controlling internet exchange points and routing, and participating in internet governance and standards development.

Concerns about foreign technology vendors, particularly in telecommunications and critical infrastructure, have driven infrastructure sovereignty initiatives. The exclusion of Chinese vendors like Huawei from 5G networks in various countries reflects security concerns about potential backdoors or foreign control. India's promotion of domestic technology through initiatives like Digital India and Atmanirbhar Bharat (self-reliant India) reflects similar sovereignty concerns.

However, infrastructure sovereignty faces practical challenges. Global technology supply chains mean even "domestic" technology often incorporates foreign components. The expertise and investment required for cutting-edge technology infrastructure may exceed national capabilities. And interoperability requirements mean infrastructure must conform to global standards, limiting sovereignty's practical scope.

Trade Implications and International Law

Digital sovereignty measures, particularly data localization, create trade tensions. International trade agreements increasingly address digital trade, with provisions on cross-border data flows, prohibition of data localization requirements, and protection of source code and algorithms. However, these provisions often include exceptions for legitimate public policy objectives like privacy, security, and law enforcement.

The tension between trade liberalization and digital sovereignty is evident in ongoing negotiations. The WTO's e-commerce negotiations address data flows and localization, with developed nations generally favoring free flows and developing nations seeking policy space for localization. Regional trade agreements like CPTPP and USMCA include digital trade chapters with varying approaches to data flows and localization. And bilateral disputes over digital sovereignty measures test the boundaries of trade law.

India's position in digital trade negotiations reflects its sovereignty concerns. India has resisted binding commitments on data flows and localization, arguing that developing nations need policy flexibility to protect citizens and develop domestic digital economies. This position tensions with India's interests in digital services exports, where data flow restrictions in other markets could harm Indian companies. The relationship with cross-border data transfer frameworks is critical.

Geopolitics and the Splinternet

Geopolitical competition accelerates splinternet trends. US-China technology rivalry manifests through export controls, investment restrictions, and competing technology standards. The US promotes its vision of free and open internet while restricting Chinese technology access. China advances its digital silk road and technology standards while maintaining extensive internet controls. And other nations navigate between these competing visions, often adopting elements of both.

The Ukraine conflict has further fragmented the internet, with Russia restricting access to foreign platforms and Western platforms blocking Russian users or content. Sanctions and counter-sanctions extend to digital services, creating parallel digital ecosystems. And concerns about information warfare and foreign influence operations drive content controls and platform restrictions across multiple countries.

This geopolitical fragmentation creates challenges for global platforms and users. Platforms must navigate conflicting requirements and political pressures from multiple governments. Users face different internet experiences based on location, with access to information and services varying by jurisdiction. And the vision of a unified global internet recedes as geopolitical divisions deepen.

Human Rights and Digital Sovereignty

Digital sovereignty measures can threaten human rights, particularly freedom of expression and privacy. Content controls enable censorship of political speech and journalism. Data localization can facilitate government surveillance by ensuring data is within reach of domestic law enforcement. Internet shutdowns—the ultimate sovereignty assertion—cut populations off from information and communication. And the lack of international human rights standards for digital sovereignty enables abuses.

India has faced criticism for internet shutdowns, particularly in conflict regions like Kashmir and during protests. While the government cites security and public order justifications, human rights organizations argue shutdowns violate freedom of expression and access to information. The Supreme Court's Anuradha Bhasin judgment established that internet shutdowns must be proportionate, time-limited, and subject to judicial review, but implementation of these standards remains inconsistent.

Balancing sovereignty with human rights requires frameworks that enable legitimate government objectives while preventing abuses. International human rights law provides some constraints—the International Covenant on Civil and Political Rights protects freedom of expression and privacy, limiting permissible restrictions. However, enforcement mechanisms are weak, and nations often prioritize sovereignty over international obligations.

India's Digital Sovereignty Approach

India's approach to digital sovereignty reflects multiple, sometimes competing objectives including protecting national security and sovereignty, enabling law enforcement access to data, promoting domestic digital economy development, protecting citizens' privacy and data, and maintaining global digital connectivity and trade. Balancing these objectives creates policy tensions and evolving frameworks.

Key elements of India's digital sovereignty approach include selective data localization for sensitive sectors like payments while avoiding blanket requirements, content regulation through IT Rules requiring platform accountability, infrastructure development through Digital India and domestic technology promotion, participation in internet governance and standards development, and bilateral and multilateral engagement on digital trade and cooperation. This approach seeks to assert sovereignty while maintaining global connectivity and economic benefits.

The Future: Fragmentation or Cooperation?

The internet's future lies between two poles—continued fragmentation into national or regional networks, or renewed cooperation preserving global connectivity while accommodating sovereignty concerns. The fragmentation path leads to higher costs, reduced innovation, limited access to information, and geopolitical division. The cooperation path requires difficult compromises on sovereignty, content, and data governance.

Potential frameworks for cooperation include international agreements on minimum standards for data protection and content regulation, mutual recognition of regulatory frameworks enabling cross-border data flows, multistakeholder governance involving governments, private sector, and civil society, and technical standards ensuring interoperability while allowing national variation. These approaches could preserve global connectivity while accommodating legitimate sovereignty concerns.

Conclusion: Sovereignty and Connectivity in Tension

Digital sovereignty and the splinternet represent fundamental challenges to the internet's global architecture. Nations' legitimate interests in security, privacy, economic development, and cultural preservation drive sovereignty assertions. However, unconstrained sovereignty threatens the internet's core value—enabling global communication, commerce, and information access. The challenge is developing frameworks that balance national control with global connectivity, protecting sovereignty while preserving the internet's benefits.

For India, this balance is particularly critical. As a major digital economy with significant technology capabilities and a large internet user base, India has interests in both sovereignty and connectivity. Policies that fragment the internet could harm Indian digital services exports and innovation. But policies that ignore sovereignty could leave India vulnerable to foreign surveillance, unable to enforce laws, and dependent on foreign technology. The path forward requires nuanced approaches that assert sovereignty where necessary while maintaining global engagement and connectivity.

For legal practitioners, policymakers, and all engaged with digital governance, the splinternet demands attention and action. Understanding sovereignty drivers, analyzing regulatory frameworks, assessing trade implications, and advocating for balanced approaches are all essential. The internet's future—whether unified or fragmented—will be determined by choices made today about sovereignty, regulation, and cooperation. The stakes could not be higher, as these choices will shape global connectivity, commerce, and human rights for generations to come.