My illustration entitled “Breaking the Algorithmic Chains” – Citizens are bound by chains made from data streams, platform logos, identity profiles and surveillance codes. I break the chains using a luminous decentralized ledger.
The empires of the digital age may possess no territorial borders.
Their power can be embedded in cloud infrastructure, operating systems, payment networks, identity platforms, application stores, artificial-intelligence models and the databases through which modern societies increasingly function.
A country may possess a flag, a government and internationally recognized borders while depending upon foreign-controlled systems for communication, computation, financial settlement, public administration and access to knowledge. Its citizens may generate enormous quantities of data while possessing little influence over where that data is stored, how it is analyzed or who captures its economic value.
This condition is increasingly described as digital colonialism.
The term must be used carefully. Digital dependency is not identical to the territorial conquest, forced labor, racial hierarchy, cultural destruction and violence of historical colonial rule. Careless comparison can diminish that history.
Nevertheless, the concept identifies a structural resemblance: one society supplies resources, labor, knowledge and markets while another center controls the infrastructure, establishes the rules and captures a disproportionate share of the resulting power.
In the digital economy, the extracted resource is often data. The governing territory is technological architecture. The instruments of dependence are platforms, protocols, clouds, credentials and code.
Digital colonialism begins when a population participates in the digital world but lacks meaningful power over the infrastructure, knowledge and data upon which that participation depends.
From Territorial Control to Architectural Control
Historical empires controlled ports, trade routes, land, labor and institutions. Control over infrastructure allowed them to determine which goods moved, which activities were permitted and where the resulting value accumulated.
Digital power can operate through a comparable architectural position. A company that controls the dominant operating system determines which applications can reach users. A cloud provider can become the foundation beneath governments, banks, hospitals and local businesses. A payment network can decide which participants may transact. An identity platform can determine who is recognized by the systems required for ordinary life.
These companies may offer valuable services, and cross-border technology can accelerate development. The presence of a foreign provider is not itself colonialism. International exchange, investment and technical cooperation can increase human freedom.
The problem arises when cooperation becomes structurally one-sided: the local population cannot inspect the system, negotiate its rules, transfer its data, develop alternatives or continue functioning if the provider withdraws access.
Under those conditions, technological architecture becomes a form of remote authority.
Eight Dimensions of Digital Colonialism
Digital colonialism is not one product or policy. It is a pattern that can emerge across several layers of technological society.
1. Infrastructure Control
Digital life depends upon physical and computational infrastructure: cables, data centers, telecommunications networks, satellites, domain-name systems, cloud services and content-delivery networks.
When essential services depend upon infrastructure controlled elsewhere, decisions taken by distant institutions can affect the availability, cost and security of local digital life. A contractual dispute, political order, corporate acquisition or technical failure can produce consequences across an entire society.
Infrastructure dependency also determines where technical expertise accumulates. When systems are imported as complete, proprietary packages, local engineers may operate interfaces without gaining the knowledge required to repair, adapt or replace the underlying architecture.
2. Platform Dependence
Digital platforms do more than host activity. They organize markets, communication, employment, transportation, advertising and public discourse. Once a platform reaches sufficient scale, participation may become practically unavoidable even when it remains formally voluntary.
Local businesses become dependent upon rankings, application stores, advertising systems and payment rules determined outside their jurisdiction. Creators build audiences they cannot export. Workers accumulate ratings that do not follow them to another service. Communities conduct public life through accounts that can be altered or suspended without meaningful local review.
The platform owns the architecture through which others produce value. Its users may create the content, relationships and commercial activity, yet the platform retains the power to change the rules.
3. Data Extraction
Data is produced through ordinary life: searches, purchases, movements, conversations, health records, photographs, financial transactions and interactions with public services. Platforms collect these activities as raw material for prediction, advertising, automation and artificial intelligence.
The individual supplies the experience. The community supplies the language, culture and social relationships. The platform captures the record, constructs the model and controls the resulting commercial intelligence.
The United Nations Conference on Trade and Development examined this imbalance in its Digital Economy Report 2019, emphasizing how value creation and value capture in the data-driven economy are concentrated within a small number of countries and corporations.
Data extraction is especially consequential because data can be reused. A physical resource is consumed, but information can be copied, combined and analyzed repeatedly. Each new dataset can increase the power of whoever already possesses the computational infrastructure required to exploit it.
4. Knowledge Dependence
A society cannot be technologically sovereign if it is permitted to use systems but prevented from understanding them.
Proprietary code, inaccessible research, restrictive licensing and closed technical standards can turn knowledge into a gatekeeping mechanism. Local developers may be trained to operate imported products rather than design independent alternatives. Universities may educate consumers of technology without cultivating the capacity to produce or critically examine it.
This creates a deeper dependency than the purchase of hardware. A machine can be replaced. The absence of knowledge can prevent a society from recognizing what must be replaced or how an alternative might be built.
As argued in Open Knowledge Is Digital Sovereignty, access to technological understanding is not merely an educational benefit. It is a condition of meaningful self-government.
5. Identity Administration
Digital identity can improve access to banking, healthcare, education and public services. It can also create a universal mechanism of observation and exclusion.
When identity infrastructure is designed or controlled by an external provider, that provider may occupy a privileged position across multiple social systems. It may influence which credentials are recognized, what information must be revealed and whether a person remains capable of participating.
The danger increases when one permanent identifier connects government records, financial accounts, communications and commercial behavior. An imported identity platform can become a universal map of the population.
The alternative developed in Self-Sovereign Identity: Proving Without Revealing is not identity without institutions. It is an architecture in which people can hold verifiable credentials, use context-specific identifiers and disclose only the information required for a particular purpose.
6. Financial Dependence
Payment systems determine who can participate in the economy. Dependence upon a small number of foreign payment networks or custodial intermediaries exposes local individuals and businesses to rules they may have little power to challenge.
Access can be withdrawn. Transactions can be delayed or frozen. Fees can change. Entire categories of lawful activity can be excluded through decisions made by institutions operating far from those affected.
Central-bank digital currencies, stablecoins and cryptocurrencies offer different responses, but none is automatically sovereign. A nationally issued digital currency may reduce foreign dependence while increasing domestic surveillance. A private stablecoin may cross borders efficiently while leaving users dependent upon its issuer and reserves. Bitcoin can reduce reliance upon a central issuer while introducing volatility, public-ledger visibility and new custodial risks.
As explained in CBDCs, Stablecoins and Programmable Money, monetary sovereignty depends upon who can observe, program, freeze and refuse the money—not merely the nationality of its issuer.
7. Standards and Rule-Making
Technical standards often appear neutral, but they distribute capabilities. A standard determines which systems can communicate, what information must be disclosed and which actors can participate without obtaining special permission.
Communities that are absent from standard-setting bodies may find themselves governed by technical assumptions they did not shape. Languages, legal systems, cultural practices and local risks may be treated as peripheral exceptions rather than requirements.
Rule-making power also operates through application programming interfaces, platform policies and proprietary formats. If one company determines the interface through which an entire market must operate, its private technical decisions can function like economic regulation.
8. Algorithmic Power
Artificial intelligence introduces another level of dependency. A society may supply data to train models developed and controlled elsewhere, then purchase access to the conclusions generated from its own collective experience.
These models may classify applicants, recommend content, detect risk, translate language or allocate opportunity. If their training data, assumptions and error patterns cannot be examined, affected communities become subjects of automated judgment without meaningful participation in its construction.
The UNESCO Recommendation on the Ethics of Artificial Intelligence, adopted in November 2021, emphasizes human rights, privacy, transparency, fairness, cultural diversity and human oversight. These principles are particularly important where powerful systems cross borders but accountability does not travel with them.
The Cycle of Digital Dependency
Digital colonialism becomes durable through a repeating cycle.
First, an external platform enters a market with superior capital, infrastructure and technical capacity. Its services may be cheaper, faster or more convenient than local alternatives.
Second, individuals, businesses and governments reorganize their activities around that platform. Documents adopt its formats. Developers depend upon its interfaces. Institutions transfer data into its infrastructure.
Third, the platform collects data and network effects. Greater participation improves its services and makes alternatives comparatively less useful.
Fourth, local providers lose the ability to compete because they lack equivalent data, scale and capital. The dominant platform becomes difficult to replace.
Finally, the platform gains rule-making power. It can alter prices, permissions and technical conditions because the cost of departure has become greater than the cost of submission.
Dependency creates extraction. Extraction creates scale. Scale creates rule-making power. Rule-making power deepens dependency.
This cycle does not require malicious intention. It can emerge from individually convenient choices accumulating into collective dependence. By the time the political consequences become visible, the architecture may already be embedded throughout society.
Data Colonialism Begins with the Individual
Digital colonialism is often discussed at the level of nations: where data is stored, which corporations dominate a market or which country controls essential infrastructure. These questions matter, but national analysis alone is incomplete.
Data originates in human life. It represents the movements, communications, preferences, relationships and decisions of individuals. A government cannot make data sovereign merely by transferring it from a foreign company into a domestic government database.
If people remain subject to constant observation, compulsory identification and unchallengeable automated decisions, the relocation of a server has not delivered Digital Sovereignty. It has changed the identity of the administrator.
State digital sovereignty and individual Digital Sovereignty are therefore not identical.
State digital sovereignty concerns the capacity of a government or political community to exercise authority over infrastructure, information and technological systems within its jurisdiction.
Individual Digital Sovereignty concerns the capacity of a person to retain meaningful authority over his or her identity, information, communications, digital possessions, cryptographic credentials and participation in technological systems.
The first can help protect the second, but it can also be invoked against it. A government may resist foreign platforms while constructing a domestic surveillance system more intrusive than the one it replaced.
Cypherpunkism therefore begins with the individual. National control is legitimate only when it strengthens the freedom and security of the people who live under it.
Data Localization Is Not Sufficient
Requiring data to remain within national borders may reduce certain foreign-access risks and strengthen local legal authority. It may also support domestic infrastructure and make enforcement easier.
But location alone does not determine power.
A server can be located domestically while its software, encryption keys, administrative access and commercial intelligence remain controlled elsewhere. Conversely, encrypted information may be stored across several jurisdictions while remaining accessible only to the individual who holds the keys.
Localization can also strengthen domestic surveillance if it makes personal information easier for local authorities to obtain. It may raise costs, fragment the Internet or reduce access to secure global services when imposed without proportionality.
The Digital Economy Report 2021 recognized that cross-border data flows create both developmental opportunities and legitimate concerns involving privacy, security and unequal value capture.
The Cypherpunkist question is therefore not simply, “Where is the data?” It is also:
- Who can read it?
- Who holds the cryptographic keys?
- Who can combine it with other records?
- Who can refuse its deletion or portability?
- Who captures the knowledge and economic value derived from it?
- Can the person represented by the data meaningfully challenge its use?
Sovereignty cannot be measured by geography alone. It must be measured by effective control.
The Cloud as a New Dependency
Cloud computing enables organizations to obtain storage, processing and sophisticated software without constructing everything themselves. This can reduce costs and allow small institutions to use capabilities once available only to the largest enterprises.
The benefit is genuine. So is the dependency.
When public agencies, banks, hospitals, universities and businesses converge upon a small number of cloud providers, those companies become part of national infrastructure. They may hold not only data but also the tools required to process it, authenticate users, operate applications and recover from failures.
Moving away may require rewriting software, converting formats, transferring enormous datasets and retraining staff. The institution is technically free to leave but practically unable to do so.
This is the distinction between formal and meaningful exit developed in The Right to Exit in Digital Civilization. A contract may permit termination while the architecture makes departure prohibitively expensive.
Cloud sovereignty therefore requires portability, documented interfaces, recoverable backups, contractual clarity, multiple providers where appropriate and sufficient internal knowledge to operate critical systems during disruption.
Open Source Is Necessary but Not Sufficient
Open-source software can reduce digital dependence by allowing local developers to inspect, modify and maintain systems. It supports education, independent auditing and the freedom to build without seeking permission from a proprietary owner.
But publishing source code does not automatically distribute power.
A project may be open while its development remains controlled by a small organization. The code may require infrastructure too expensive for most communities to operate. Documentation may be inaccessible. Contributors may lack influence over the roadmap. A service may use open-source components while retaining user data in a closed and non-portable platform.
Open code must therefore be joined by open knowledge, open standards, technical capacity and plural governance. The ability to read code matters; so does the practical ability to deploy, maintain and adapt it.
Decentralization Without Fragmentation
Decentralization can limit digital colonialism by reducing dependence upon a single provider or jurisdiction. Federated services, peer-to-peer networks, distributed storage and locally operated infrastructure can preserve alternatives.
Local Internet exchange points offer a practical example. By allowing networks to exchange traffic locally, they can reduce the cost and latency of sending domestic communications through distant international connections. The Internet Society has emphasized the role of IXPs in strengthening local connectivity, competition and technical communities.
Yet decentralization should not become technological isolation. A collection of incompatible national systems could fragment the Internet, restrict knowledge and create new barriers to communication.
The objective is not autarky. It is resilient interdependence.
A sovereign society should be able to cooperate internationally without becoming permanently subordinate to one provider. Systems should interoperate across borders while preserving privacy, portability and local capacity.
Digital Protectionism Can Reproduce Colonial Power
Governments may respond to foreign technological concentration by promoting domestic champions, restricting external services or creating national platforms. Some of these measures may be justified. None should be assumed to produce freedom automatically.
A domestic monopoly can surveil, exclude and exploit as effectively as a foreign one. National ownership does not make opaque code transparent. Local storage does not make excessive collection legitimate. Government control does not transform compulsory identity into voluntary participation.
A country can escape external digital dependence while constructing internal digital absolutism.
This is why Cypherpunkism is not simply a doctrine of national technological independence. As argued in Against Digital Absolutism, technological authority must be necessary, limited, transparent, proportionate, contestable and subject to meaningful review or exit.
The nationality of the institution does not remove these requirements.
A Cypherpunkist Programme Against Digital Colonialism
Resistance to digital colonialism requires more than slogans about sovereignty. It requires architectures that distribute knowledge and power.
1. Protect Privacy Through Architecture
Personal information should be minimized, compartmentalized and encrypted. Sensitive data should not be centralized merely because storage is inexpensive. Systems should permit verification without indiscriminate disclosure and computation without unnecessary exposure.
2. Keep Cryptographic Keys Close to Those Represented
Encryption offers limited sovereignty when providers retain all effective control over the keys. Individuals, communities and institutions should be able to control essential credentials and confidential information directly or through accountable arrangements they can change.
3. Build Local Technical Capacity
Societies need engineers, researchers, security professionals, educators and institutions capable of understanding the technologies upon which they depend. Procurement should include knowledge transfer rather than producing permanent reliance upon outside consultants.
4. Require Portability and Interoperability
Data, identity, audiences, records and applications should be transferable among compatible services. Open standards can allow local providers to compete without requiring users to abandon existing relationships and histories.
5. Support Open Knowledge and Open Architecture
Research, protocols, public-interest software and educational resources should be accessible. Critical systems should be open to independent inspection, especially when they determine identity, financial access or public rights.
6. Prevent Unnecessary Concentration
Governments and institutions should understand the systemic risk of placing every critical function with one provider. Multiple suppliers, federated systems, local hosting and decentralized components can preserve alternatives where appropriate.
7. Keep Local Traffic and Value Local Where Practical
Local exchange points, data centers, payment systems and software ecosystems can reduce costs and develop domestic expertise. The purpose should be to strengthen participation in the global network, not to sever it.
8. Give Communities a Voice in Standards and Governance
People affected by a technology should participate in defining its requirements. This includes linguistic minorities, developing economies, people with disabilities and communities whose circumstances are poorly represented by dominant technical assumptions.
9. Preserve Competition and the Freedom to Build
Developers should be free to create interoperable clients, privacy tools and alternative services. Application stores, platforms and regulations should not unnecessarily prevent new participants from challenging established technological authorities.
10. Place Individual Sovereignty Inside National Strategy
A national digital strategy should be measured by whether it expands the agency of the people—not only whether it strengthens the state or produces domestic corporations. Privacy, due process, encryption, self-custody and the right to exit must remain part of technological development.
My illustration “Breaking the Algorithmic Chains” work-in-progress. My art represents: escaping technological dependency and algorithmic domination.
The African Union Data Policy Framework
The African Union Data Policy Framework, published in July 2022, recognizes data as a strategic resource while emphasizing digital rights, equitable development, harmonized governance and the creation of a trustworthy data environment.
Its importance lies in refusing a false choice between the free extraction of data by external platforms and its complete isolation within national borders. Data governance must enable development while protecting the people and communities from whom data originates.
This requires participation in the creation of value, not merely protection from harm. A population should not remain a source of raw data while advanced analysis, intellectual property and economic rewards accumulate elsewhere.
True digital development means acquiring the capacity to build, govern and benefit from technology—not simply increasing the number of users consuming imported platforms.
Applying the Cypherpunkist Test
The Cypherpunkist Test asks who a technology ultimately empowers. Applied to digital colonialism, the inquiry becomes:
- Who owns or controls the essential infrastructure?
- Where is the data stored, and who possesses effective access?
- Who holds the encryption keys and identity credentials?
- Can local institutions inspect, repair and modify the system?
- Can local developers build compatible alternatives?
- Who establishes the technical standards and platform rules?
- Who captures the economic value created from local data and labor?
- Can users move their identities, records, audiences and possessions elsewhere?
- Can the provider withdraw service or alter conditions unilaterally?
- Can affected people challenge automated or administrative decisions?
- Does national control protect individuals or merely transfer power to a domestic center?
- Can the society continue functioning if the external provider disappears?
A system may be foreign without being colonial when participation is open, power is limited, knowledge is shared and exit remains practical. A system may be domestic while reproducing colonial structures when it extracts, excludes and governs without accountability.
Beyond Technological Nationalism
The answer to digital colonialism is not a world of sealed national networks. The Internet derives much of its value from global interoperability, shared knowledge and communication across borders.
Nor should every foreign technology be rejected. Societies have always learned from one another, traded across borders and built upon discoveries made elsewhere. Technological exchange can be mutually beneficial.
The necessary distinction is between interdependence and dependence.
Interdependence exists when parties cooperate while retaining capabilities, alternatives and bargaining power. Dependence exists when one party can impose conditions because the other cannot meaningfully refuse or leave.
Cypherpunkism seeks resilient interdependence: open networks without permanent subordination, international cooperation without universal surveillance and shared standards without centralized ownership of digital life.
Conclusion: Sovereignty Must Reach the Person
Digital colonialism is not defeated when a government places servers inside its borders, creates a national platform or substitutes one technological supplier for another.
It is defeated when societies possess the knowledge to understand their infrastructure, the capacity to build alternatives, the legal power to restrain extraction and the architectural freedom to leave systems that become abusive.
Most importantly, it is defeated when individuals retain meaningful control over their identities, information, communications, credentials and digital possessions.
A government cannot claim digital sovereignty while denying privacy to its citizens. A corporation cannot claim to connect the world while making entire societies dependent upon its permission. A decentralized network cannot claim liberation if its practical power remains concentrated among a few operators.
The struggle against digital colonialism is therefore not a struggle against global technology. It is a struggle over the terms upon which humanity enters technological civilization.
No society is digitally sovereign if its people remain subjects of systems they cannot understand, challenge, modify or leave.
Technology should cross borders. Knowledge should cross borders. Human cooperation should cross borders.
Domination should not.
Privacy is sovereignty.
Cryptography is applied freedom.
Decentralization is a check on power.
Code is political architecture.
Digital sovereignty belongs to the individual.
References
- African Union. “AU Data Policy Framework.” July 2022.
- Couldry, Nick and Ulises A. Mejias. The Costs of Connection: How Data Is Colonizing Human Life and Appropriating It for Capitalism. Stanford University Press, 2019.
- Internet Society. “Policy Brief: Internet Exchange Points.” 2015.
- Kwet, Michael. “Digital Colonialism: US Empire and the New Imperialism in the Global South.” Race & Class, Volume 60, Issue 4, 2019.
- Sim, Herbert R. “Privacy Is Sovereignty.” 9 March 2013.
- Sim, Herbert R. “Metadata Is Power.” 25 July 2013.
- Sim, Herbert R. “Digital Sovereignty: A Formal Definition.” 10 December 2013.
- Sim, Herbert R. “The Architecture of Power: A Cypherpunkist Theory of Technology.” 22 June 2015.
- Sim, Herbert R. “Decentralization Is a Check on Power.” 26 October 2015.
- Sim, Herbert R. “The Right to Exit in Digital Civilization.” 1 November 2017.
- Sim, Herbert R. “The Cypherpunkist Test: Who Does the Technology Empower?” 10 October 2018.
- Sim, Herbert R. “Against Digital Absolutism: Why Cypherpunkism Is Not Anti-State or Anti-Corporation.” 22 August 2019.
- Sim, Herbert R. “Open Knowledge Is Digital Sovereignty.” 14 February 2020.
- Sim, Herbert R. “CBDCs, Stablecoins and Programmable Money.” 24 September 2020.
- Sim, Herbert R. “Self-Sovereign Identity: Proving Without Revealing.” 5 July 2021.
- United Nations Conference on Trade and Development. “Digital Economy Report 2019: Value Creation and Capture—Implications for Developing Countries.” 2019.
- United Nations Conference on Trade and Development. “Digital Economy Report 2021: Cross-border Data Flows and Development—For Whom the Data Flow.” 2021.
- United Nations Human Rights Office. “International Standards on Privacy in the Digital Age.”
- UNESCO. “Recommendation on the Ethics of Artificial Intelligence.” 2021.