What data sovereignty means for New Zealand organisations, why the Cloud Act matters and why ‘local cloud’ does not guarantee legal protection.
I’m sorry if this looks like shameless self-promotion, but I’m interested to know what people in this community make of the post.
Just FYI there’s a bit of a problem in dark mode (I could not even work out how to enable light mode, so maybe it’s always like this?):
I think my main feedback on the article would be that the intent is not clear. There is information about data sovereignty, but there is no call to action, it doesn’t really tell me why the article exists. If it’s just an explainer I feel like it should tell me more clearly that it’s just explaining data sovereignty. I kept waiting for the part where it would try to convince me of something but it didn’t come.
Or maybe more succinctly, I didn’t come away from it understanding what data sovereignty means for NZ. What are the implications of these listed facts?
Useful feedback thanks.
Yes, It is a backgrounder. I mention the topic occasionally in my journalism and point readers to this rather than explain the ideas at length in a news story.
I’m looking into the dark mode strangeness. I suspect it’s because I dropped some HTML and CSS into the page without planning for dark mode (I’m not a coder).
This was my take too. There’s no CTA or advice; so, after reading it I am left more uncertain then when I started it.
It’s interesting that you were both looking for a call to action or similar. I’ve got a whole bunch of similar backgrounders that are among the most popular posts on my site. None of them make calls. On the other hand there are plenty of posts where I do make judgement calls.
The final point that this isn’t a technical problem, is a little off the mark.
The two pillars of data sovereignty are access and trust.
Te Pā Tūwatawata addresses both of these pillars. Data is encrypted in transit and at rest, access is controlled; it is built on open source technology, the platform can be audited and thus trusted.
Both pillars are fundamental, controlling access to data with strong encryption and effective governance ensures, control and ownership of IP, cultural knowledge, business critical information, etc… Whilst open source is not strictly required for trust of platforms, it does simplify things significantly (whilst generating it’s own problems); ownership cannot be ensured, if you are unable verify the security is implemented correctly.
Both pillars are heavily technical in nature.
