What Is Data Sovereignty?

Data sovereignty is about who makes the rules for your data. There are two versions of the question. The legal one: data on a server in a country falls under that country's laws, wherever you live. The personal one: whether you actually control your own files and the machines they sit on, or you're renting from someone who can change the terms.

Both are real. Both get called data sovereignty. This page covers both.

What Is Data Sovereignty? Two Ideas Wearing One Name

Most confusion here comes from two things sharing one name. A government minister and someone setting up a home server can both say data sovereignty and mean almost nothing in common. Let's split it.

Sense one: national, or legal, data sovereignty

Data feels weightless. It isn't. Every file you own is charge or magnetism on a drive, in a rack, in a building, in a country, under a flag. National data sovereignty is the principle that data stored inside a country is subject to that country's laws.

Think of a suitcase. It doesn't matter where you packed it. Once it's in a locker in another country, that country's officials decide the rules for opening it.

One complication: laws reach across borders. A company headquartered in one country can sometimes be compelled to produce data it holds in another. Where the server sits and who can be ordered to open it are separate questions.

Sense two: personal digital sovereignty

The second sense is smaller and far more actionable. Digital sovereignty at the individual level means: do you control your own data and the infrastructure it runs on? Can you get a complete copy and move it elsewhere? Can somebody lock you out of your own life with a policy change and an automated email?

Renting versus owning is the honest analogy. Renting is fine until the landlord raises the rent or sells the building. Almost everyone's digital life is rented. That isn't stupid. It's just worth knowing which one you're doing. National sovereignty gets fought over in parliaments. Personal sovereignty you can move this weekend.

Why Data Sovereignty Matters Right Now

This was niche for twenty years. A few things made it urgent.

• Cloud concentration. A huge share of the internet runs on a handful of providers. When one region of one provider has a bad morning, thousands of unrelated companies fall over at once. That's fragility, and leverage held by very few people.
• Cross-border transfer. Your data crosses borders constantly and the legal ground under those transfers keeps moving. Agreements get struck down and renegotiated. Compliance built on that is built on sand.
• Government access requests. Platforms get legal demands for user data and comply with many of them. That's due process working. The structural point stands anyway: if someone else holds your data, your privacy depends on their willingness to fight for you.
• Platform lock-in. Export buttons exist. What comes out is often a zip of formats nothing else opens. Technically portable, practically stuck.
• Terms that change on their own. The agreement gets rewritten and your options are accept or leave, and leaving costs you everything you stored there. That's not a negotiation. It's a notice.

What Actually Happens To A Photo You Upload

Abstractions are easy to nod along to. Here's the chain of custody for one photo on a big platform. It's ordinary machinery, not villainy.

1. It leaves your phone with metadata attached: timestamp, device, camera settings, often GPS. Many platforms strip location from what other users see. That isn't the same as not having it.
2. It lands on servers you don't control, in a data center you can't name, copied to more than one region for redundancy. There are now several copies and you can't count them.
3. Automated systems read it. Not a person over your shoulder — classifiers. Moderation, face grouping, object recognition, ad signals. This happens whether or not you marked it private.
4. You grant a license. Most large platforms take a broad, worldwide, royalty-free, sublicensable license to host, copy, resize, adapt and distribute what you upload. Some of that is technically necessary. These licenses are usually written wider than that minimum, and you agreed.
5. Legal process arrives, sometimes. If a valid order shows up, they respond. Whether you're told depends on the order.
6. The account ends. You delete it, you lose the password, an automated system flags something, or you die. Access can stop instantly. Copies inside their systems don't vanish on the schedule your access does, and the appeal goes to a queue.

Now run the same photo through infrastructure you control. It sits on a disk you own, backed up to one offsite copy you chose. No license, because there's no counterparty. Delete it and it's deleted.

Indigenous Data Sovereignty

There's a third use of the term worth naming, because it's real and it predates the cloud argument. Indigenous data sovereignty is the principle that data about Indigenous peoples — their lands, languages, health and knowledge — should be governed by those peoples themselves: who collects it, who can access it, and who benefits.

It grew out of a long history of researchers, companies and governments taking information from communities and using it without consent or benefit. The frameworks are worth reading directly: the CARE Principles for Indigenous Data Governance (Collective Benefit, Authority to Control, Responsibility, Ethics), and OCAP in Canada (Ownership, Control, Access, Possession). I'm not an expert here and won't pretend to speak for anyone.

Data Sovereignty Explained: What It Looks Like In Practice

None of this requires becoming a hermit with a server rack. Sovereignty is a dial, not a switch. Here's where it turns.

Own your domain name

The highest-leverage cheap thing in computing. A domain costs about two coffees a year. Put your email on it. Put your site on it. If a provider fails you or bans you by mistake, you point the domain elsewhere and your identity survives.

Prefer local-first software

The file lives on your machine and syncing is a feature, not a requirement. The test: turn off the network. If your work is still there and still editable, it's yours. If the screen asks you to reconnect, it never was.

Use encryption where you hold the key

"Encrypted at rest" usually means encrypted on their servers with their key. That stops a thief with a stolen drive. It doesn't stop the company, or anyone who can compel the company. End-to-end encryption, where the key never leaves your device, is the kind that changes the power relationship. The tradeoff is permanent: lose the key, lose the data.

Use federated services

Federation is email's model applied to everything else. Many independent servers, one shared protocol, everyone can talk to everyone. Your account lives on a server run by you, or by someone you can email when it breaks. If your operator turns out to be a jerk, you move and keep the same friends.

Self-host something. Anything.

You don't need a rack. An old laptop in a closet running file sync, photo backup and a password manager replaces most of what people rent. Start with one service you'd miss, live with it a month, then add a second.

Keep backups you have actually restored

Three copies, two kinds of media, one somewhere else. Then restore from it once, on purpose, to prove it works. A backup you've never restored isn't a backup. It's a rumor.

The Honest Tradeoffs

Anyone telling you sovereignty is free is selling something. Here's the bill.

• You become the sysadmin. Updates, certificates that expire at bad moments, a disk that dies on a Tuesday. That's your job now.
• Uptime is yours. Nobody gets paged at 3am except you, and only if you built the thing that pages you.
• Backups are yours. This is the one that bites. Losing ten years of photos to a corporation is enraging. Losing them to your own neglect is worse.
• Some convenience is genuinely gone. Share links that just work. Search across everything you've written. Apps that assume you're on the big platform.
• Security cuts both ways. A large provider employs a full-time security team. You have a Saturday. Self-hosting done badly is worse than not self-hosting.

The goal isn't everyone running their own everything. It's moving the dial on purpose, knowing what you traded.

Where WOPR Fits

WOPR Systems is the project behind this page. The WOPR Foundation is a 501(c)(3) nonprofit that builds two things: mesh networking, and direct social services for people who need help now. The through-line is infrastructure the people using it actually control.

The political argument is in Why WOPR. The longer reasoning about networks and power is in Theory. The rules we hold ourselves to are in the Constitution, in public.

Two related projects, described honestly rather than pitched: Folkmoot is verifiable voting software. Blackout Labs sells off-grid mesh hardware, a store separate from the nonprofit's programs. If this landed, come join, or see who else is doing the work on the allies page.