Law School Uncensored

Introduction

India is witnessing an unprecedented digital revolution. From digital payments and online banking to e-governance, healthcare records, social media, artificial intelligence, and cloud computing, almost every aspect of modern life depends on data. Every day, millions of Indians generate enormous amounts of information through smartphones, computers, websites, mobile applications, and connected devices.

While India has become one of the world’s largest producers and consumers of digital data, an important question arises: Where is all this data being stored?

Many people assume that data simply exists in the “cloud.” However, the cloud is not an invisible space. Every piece of information is ultimately stored in a physical facility known as a data centre. As India moves towards becoming a digital superpower, it is essential that we invest in building more in-house data centres and reduce excessive dependence on foreign-owned facilities or data centres located outside our borders.

The future will not be defined only by control over oil, minerals, or natural resources. It will also be shaped by control over information. Countries that control data will have a significant strategic, economic, and security advantage. Therefore, India must treat data as a critical national asset and build the infrastructure necessary to protect it.

What is a Data Centre?

A data centre is a highly secure facility that houses servers, networking equipment, storage systems, and computing infrastructure used to store, process, and manage digital information.

Whenever a person sends an email, makes an online payment, uploads a photograph, watches a video, accesses a government portal, or uses a mobile application, the information generated is stored in a server located within a data centre.

Data centres store a wide variety of information, including:

• Personal information of citizens
• Banking and financial records
• Health records
• Educational records
• Government databases
• Business and corporate information
• Telecommunications data
• Social media content
• Defence and strategic information
• Artificial intelligence datasets

In simple terms, data centres are the backbone of the digital economy. Without them, the internet and modern digital services cannot function.

Why Data is the New Strategic Resource ?

For decades, nations competed for access to oil, gas, minerals, and other natural resources. These resources powered industries, transportation, and economic growth.

Today, data has emerged as a similarly valuable resource.

Companies use data to understand consumer behaviour, improve products, and generate revenue. Governments use data for governance, policymaking, taxation, welfare distribution, and national security. Artificial intelligence systems require vast amounts of data to learn and make decisions.

As technology evolves, information will become even more valuable than many traditional resources.

The famous phrase “Data is the new oil” highlights the importance of information in the modern economy. However, unlike oil, data can be copied, analysed, shared, and monetized repeatedly. This makes control over data even more critical.

If India produces massive amounts of data but stores it abroad, it risks losing control over one of its most valuable national assets.

The Importance of Data Sovereignty

Data sovereignty refers to the principle that data should be subject to the laws and governance framework of the country in which it is collected or stored.

When Indian citizens generate data, it is logical that such data should remain under the protection of Indian laws and Indian regulatory authorities.

If critical data is stored outside India, several concerns arise:

• Foreign governments may have legal access to the data.
• Indian authorities may face difficulties obtaining information during investigations.
• National security risks may increase.
• Dependence on foreign infrastructure may create vulnerabilities during geopolitical conflicts.

Building domestic data centres strengthens India’s digital sovereignty and ensures that Indian data remains subject to Indian laws.

National Security Concerns

Data is no longer merely a commercial asset. It has become a matter of national security.

Government databases, defence communications, critical infrastructure systems, transportation networks, healthcare systems, and financial institutions generate enormous amounts of sensitive information.

If such information is stored in foreign jurisdictions, India may face serious challenges during times of political tension, cyber warfare, or international disputes.

Modern warfare is increasingly digital. Cyberattacks can disrupt banking systems, electricity grids, communication networks, and government services. In such situations, dependence on foreign-controlled infrastructure may create strategic vulnerabilities.

Countries around the world are increasingly recognizing data centres as critical national infrastructure. India must adopt a similar approach and invest heavily in domestic data storage capabilities.

Privacy Concerns and Protection of Citizens’ Data

Privacy is a fundamental right in India.

In Justice K.S. Puttaswamy v. Union of India (2017), the Supreme Court of India recognized the right to privacy as a fundamental right under Article 21 of the Constitution.

When personal data is stored abroad, multiple privacy concerns arise:

• Different countries may have different privacy standards.
• Foreign governments may lawfully access data under their domestic laws.
• Citizens may have limited remedies if their data is misused.
• Enforcement of privacy rights becomes more complicated.

India has enacted the Digital Personal Data Protection Act, 2023 (DPDP Act) to regulate the processing of personal data and protect the rights of individuals.

The DPDP Act seeks to ensure responsible handling of personal data. However, effective enforcement becomes easier when data remains within India’s jurisdiction.

Domestic data centres can help strengthen privacy protections and improve regulatory oversight.

Jurisdictional Challenges in Cross-Border Data Storage

One of the most significant legal problems associated with foreign data storage is the issue of jurisdiction.

Jurisdiction determines which country’s courts, regulators, and law enforcement agencies have authority over a particular matter.

Consider a situation where:

• An Indian citizen becomes a victim of cyber fraud.
• The fraud is committed using a platform headquartered in another country.
• The data is stored in a third country.
• The servers are operated by a company incorporated elsewhere.

Determining which country has jurisdiction can become extremely complicated.

Indian authorities may need to:

• Issue legal requests through diplomatic channels.
• Follow Mutual Legal Assistance Treaty (MLAT) procedures.
• Coordinate with foreign law enforcement agencies.
• Wait months or even years for access to evidence.

These delays can seriously hamper investigations and reduce the chances of recovering stolen funds or prosecuting offenders.

When data is stored within India, law enforcement agencies can act more quickly and efficiently under Indian law.

Risks of Foreign Governments Accessing Data

Many countries have laws that permit government agencies to access data stored by companies operating within their territory.

For example, certain foreign laws may compel technology companies to disclose information to government authorities under specific circumstances.

This creates concerns regarding:

• National security
• Commercial confidentiality
• Strategic business information
• Citizen privacy

Even if a company promises privacy, it may still be legally obligated to comply with the laws of the country where it operates.

By encouraging local data storage and Indian-owned data centres, India can reduce exposure to such risks.

Economic Benefits of Building Data Centres in India

Apart from security and legal advantages, domestic data centres offer significant economic benefits.

Employment Generation

Data centres create jobs for:

• Engineers
• IT professionals
• Cybersecurity experts
• Infrastructure managers
• Construction workers
• Legal and compliance professionals

Investment and Infrastructure Growth

Large-scale data centre projects attract investments in:

• Renewable energy
• Telecommunications
• Real estate
• Power infrastructure
• Technology ecosystems

Supporting Artificial Intelligence

India’s AI ambitions require vast computational resources and data storage capabilities.

Domestic data centres can support:

• AI research
• Machine learning applications
• Cloud services
• Digital innovation

Reduced Dependency

Building local infrastructure reduces dependence on foreign service providers and strengthens India’s technological self-reliance.

Cybersecurity and Incident Response

Cyberattacks are increasing globally.

When data is stored abroad, responding to cyber incidents often involves multiple jurisdictions and regulatory authorities.

Domestic data centres provide:

• Faster incident response
• Better coordination with Indian regulators
• Easier forensic investigations
• Greater compliance monitoring

Organizations can work more closely with Indian cybersecurity agencies to mitigate risks and protect critical infrastructure.

The Need for a Comprehensive National Strategy

India has already taken important steps toward strengthening its digital ecosystem.

Initiatives such as:

• Digital India
• IndiaAI Mission
• DPDP Act, 2023
• National Cyber Security initiatives

demonstrate the government’s commitment to building a secure digital economy.

However, India must continue investing in:

• More domestic data centres
• Green data centre infrastructure
• Indigenous cloud technologies
• Cybersecurity capabilities
• Skilled workforce development

A comprehensive national strategy focused on data sovereignty will help ensure long-term digital resilience.

Conclusion

India stands at a crucial moment in its digital journey. As the country generates enormous volumes of data, it must also develop the infrastructure necessary to store, protect, and manage that information within its borders.

Data is no longer merely a technological asset. It is an economic resource, a strategic asset, and a matter of national security. The future may witness conflicts not only over natural resources but also over control of information and digital infrastructure.

Relying excessively on foreign-owned data centres or facilities located outside India can create risks relating to privacy, cybersecurity, jurisdiction, law enforcement, and national sovereignty. Cross-border data storage may complicate investigations, expose sensitive information to foreign legal systems, and reduce India’s control over its own digital future.

Building more in-house data centres is therefore not just an infrastructure requirement; it is a strategic necessity. By investing in domestic data storage capabilities, India can protect its citizens’ privacy, strengthen national security, improve legal enforcement, generate employment, support innovation, and reinforce its position as a global digital leader.

The digital future of India must be built on Indian soil, governed by Indian laws, and secured through Indian infrastructure. Only then can the nation fully realize the promise of a truly sovereign digital economy.