Mohammed Retmi, Vice President: Sovereign Public Cloud at Core42, on how the Middle East is securing its digital future.
In the Middle East, nations have long recognized the importance of safeguarding their most critical resources. Historically, this meant protecting oil reserves, but in today’s digital age, the most valuable asset isn’t oil—it’s data.
You’ve likely heard the phrase, “data is the new oil.” Popularized by Clive Humby, a British mathematician and architect of the Tesco Clubcard, this analogy emphasizes the immense value data holds in the modern economy, highlighting that, like oil, data must be refined, analyzed and processed, before its full value can be realized.
Yet, unlike oil, data is not a finite resource. While oil is a limited natural resource that will eventually run out, data has no such limitations. It can be continually created, collected, copied, and reused without being depleted. This makes its value less about scarcity and more about how it is collected, developed, and utilized. Moreover, its infinite availability introduces challenges in storage, privacy, security, and ethical use. As such, managing and protecting this vast and growing resource is becoming increasingly complex.
This is where data sovereignty comes into play. Data sovereignty is the concept that data is subject to the laws and regulations of the country or region where it is collected or stored. While many believe that simply storing data within a country ensures sovereignty, the reality is far more complex. True data sovereignty involves protection against extraterritorial jurisdictional control, where a foreign government might assert authority over technology or infrastructure originating from their country. This means that countries must implement robust frameworks to ensure that their data remains under local governance and control. This includes securing data across its entire lifecycle. At rest, data should be encrypted and securely stored; in transit, it must travel through protected channels; and during use, it should be accessed and managed with strict controls to prevent unauthorized access; all of which are essential to ensure it remains private, protected, and under national jurisdiction at all times.
In our region, the wise leadership of the UAE long recognized the pivotal role that data sovereignty plays in shaping a secure, innovative digital future and realizing the ambitious goals outlined in strategies like National Strategy for Artificial Intelligence 2031 and We the UAE 2030. As such, several stringent data sovereignty laws have been implemented as part of its broader cybersecurity strategies.
Similarly, Saudi Arabia has introduced legal frameworks under the guidance of the Saudi Data and Artificial Intelligence Authority (SDAIA) to enforce data localization and protect national data assets. These regulations ensure that sensitive national data remains within the country’s borders and is handled in accordance with local laws.
Evolving approaches to data sovereignty
Traditionally, data sovereignty was managed by building and operating domestic infrastructure with strict security and access controls. But the landscape is evolving. The rise of sovereign cloud solutions provides a transformative approach, enabling countries to leverage advanced cloud technologies while maintaining control over their data.
Sovereign clouds are designed with compliance and security at their core, ensuring that data is not only stored within national borders but also protected against unauthorized access and potential foreign interference. By utilizing sovereign cloud infrastructure, organizations can ensure that their data remains under local jurisdiction, adhering to national regulations while benefiting from the scalability and flexibility of cloud computing.
Core42, a G42 company, actually co-developed a comprehensive Sovereign Public Cloud offering as part of a broader partnership with Microsoft, leveraging Microsoft Azure and enhanced by Core42’s sovereign controls platform – Insight, to simplify the more cumbersome aspects of sovereign cloud infrastructure and assures compliance for both customers and regulators. With sovereign control sets, robust audit, and assurance capabilities, as well as streamlined compliance management features, Core42’s Sovereign Public Cloud offering empowers government and regulated entities to maintain control over sensitive data while benefitting from the innovation and scalability of a hyperscale cloud.
Furthermore, Core42’s sovereign AI capabilities complement its cloud infrastructure, ensuring that artificial intelligence models are trained and deployed within locally governed environments. This is particularly critical as governments and regulated industries increasingly rely on AI-driven insights while adhering to stringent data privacy regulations.
Enabling safe and secure innovation
Looking ahead, the Middle East is poised to become a global leader in data sovereignty. By continuing to invest in sovereign cloud solutions and robust data governance frameworks, the region can ensure that its data remains secure, private, and under local control. This will not only protect national interests but also foster innovation, economic growth, and digital transformation.
As we navigate the complexities of the digital age, the importance of data sovereignty cannot be overstated. It is the foundation upon which a secure, innovative, and prosperous digital future will be built. The Middle East, with its forward-thinking leadership and commitment to data sovereignty, is well-positioned to lead the way in this critical area.
