From Global Commons to Digital Borders: India and the New Digital Sovereignty Moment

As the global order shifts from open data flows to data localisation, India’s growing adoption of home-grown digital platforms such as Zoho marks more than a push for self-reliance; it signals the rise of a sovereign digital republic in an increasingly fragmented digital world order.

Naved Akhtar Khan, PhD Research Scholar

When India’s Home Minister Amit Shah announced that his office had adopted Zoho Mail, a locally built software platform, it seemed like an ordinary administrative update. Yet beneath the surface, the decision carried symbolic force. For decades, India’s bureaucratic and political ecosystems have relied on American digital platforms like Gmail, Google Drive, Microsoft Teams, Zoom; which quietly undergird everything from policy coordination to campaign outreach. By opting for Zoho, Shah was not simply changing an app; rather, he was making a statement that India’s digital future should be governed by Indian systems under Indian laws.

This moment reflects a wider transformation. Across the world, the architecture of the internet is being redrawn. The ideal of a borderless digital economy has given way to a new era of digital sovereignty. The United States, once the champion of global openness and free flow of data, is now erecting tariff walls and enforcing export controls. Donald Trump’s renewed tariff hikes, the U.S.-China tech decoupling, and Europe’s regulatory assertiveness have together signalled that data and technology have become the new frontiers of power. In this changing world, India’s move toward local platforms like Zoho is not a gesture of isolationism but a strategic assertion of independence; the recognition that sovereignty in the twenty-first century is written in code.

The Rise and Fall of Open Data Flows

The story of the digital world began with the dream of openness. In the late 1990s, the United States articulated the principle of the “free flow of information” as a universal good. Much like the post-war promotion of free markets, this doctrine was embedded into trade agreements, international institutions and the rhetoric of innovation. American companies such as Google, Facebook and Amazon became global utilities, thus connecting people while consolidating unprecedented power over communication, commerce and knowledge.

For a time, this system appeared benign. Billions came online, global supply chains flourished, and the internet became a symbol of freedom. Yet the costs soon became visible. The same networks that enabled connection also centralised control. Edward Snowden’s 2013 revelations exposed the vast reach of U.S. surveillance. The Cambridge Analytica scandal showed how private data could be weaponised for political manipulation. The rhetoric of “open data” concealed the reality of digital dependency, as information from the Global South flowed to servers in California and profits flowed the other way.

By the 2010s, the contradictions of digital globalisation had reached their limits. The utopia of a single, open internet gave way to the politics of digital protectionism. What began as an experiment in openness was now fragmenting into multiple, sovereign internets, each reflecting the political culture and security priorities of its region.

The Fragmenting Digital Order

The first decisive challenge came from China, which erected the Great Firewall and built a parallel digital universe. Often portrayed as censorship, this was also a strategy of technological sovereignty, the determination that Chinese data and discourse would remain within Chinese jurisdiction. Behind the wall, Beijing fostered its own giants such as Baidu, Tencent, Alibaba and ByteDance, thus proving that controlled ecosystems could still deliver innovation.

Europe responded differently, wielding regulation as its instrument of power. Through the General Data Protection Regulation (GDPR), and later the Digital Markets Act (DMA) and Digital Services Act (DSA), Brussels declared that personal data belongs to individuals, not corporations. The so-called “Brussels Effect” extended European privacy norms across the globe, compelling even American firms to comply.

Meanwhile, the United States, faced with Chinese competition and domestic backlash, began retreating from its own gospel of openness. Through the CHIPS and Science Act, export controls on AI technology, and supply-chain “friend-shoring,” Washington conceded that interdependence had become a strategic liability.

Together, these moves heralded a new phase of digital fragmentation. The internet which once imagined as a universal commons has splintered into a patchwork of sovereign networks. In place of a global village, we now inhabit a world of digital republics, in which, each republic is thus balancing their openness with their own control.

India’s Digital Republic: A Hybrid Model of Openness and Autonomy

In this emerging landscape, India’s model stands apart. Rather than replicating China’s control or Europe’s regulation, India has built a public-digital infrastructure rooted in openness, inclusion and sovereignty. Over the past decade, this vision has materialised through the creation of the India Stack:  a suite of interoperable platforms that form the backbone of Digital India.

At its base lies Aadhaar, a universal identity system now covering over 1.4 billion citizens. Above it runs the Unified Payments Interface (UPI), which processes billions of transactions monthly and has become a global reference for real-time payment systems. Tools like DigiLocker and e-Sign have transformed governance into a paperless, presence-less model, while the Open Network for Digital Commerce (ONDC) seeks to break the stranglehold of e-commerce monopolies through open protocols. The Digital Personal Data Protection Act (DPDPA) 2023 gives this ecosystem a legal backbone, balancing data flows with national oversight.

This architecture embodies a simple philosophy: the state builds the rails; innovators run on them. By making its digital infrastructure open, interoperable and sovereign, India has demonstrated that democracy and autonomy can coexist. The adoption of Zoho and other Indian platforms within government only reinforces this confidence that India can innovate globally while governing locally.

Crucially, India’s model has begun to travel. Through initiatives like the UPI–PayNow corridor with Singapore, the export of MOSIP (Modular Open Source Identity Platform) to African and Asian nations, and the framing of Digital Public Infrastructure (DPI) as a G20 priority under India’s presidency, New Delhi is translating domestic success into digital diplomacy. It offers the Global South a model of empowerment without dependency, neither Silicon Valley’s profit-driven openness nor Beijing’s surveillance state, but a third way grounded in democratic accountability.

The Geopolitics of Code

The contemporary contest for power is increasingly being waged in code, not conflict. In the twenty-first century, data centres are the new refineries, and the algorithms that govern information flows shape the fate of economies and elections alike. The Russia-Ukraine conflict revealed how technology firms such as SpaceX and Microsoft could influence warfare, logistics and even diplomacy, blurring the boundary between state and corporate power.

For India, this realisation underscores why localisation is not merely economic policy but national-security doctrine. Keeping critical data within the country’s jurisdiction ensures that decisions affecting citizens are governed by Indian law, not foreign terms of service. As the world grows more unstable, nations that control their digital infrastructure will enjoy greater autonomy and resilience.

Yet India’s approach remains cooperative rather than isolationist. Its data strategy seeks to ensure trusted cross-border flows while protecting citizens’ rights. This delicate balance of openness, trust, and sovereignty is what distinguishes India’s model from the coercive digital nationalism seen elsewhere.

Balancing Sovereignty and Liberty

Still, sovereignty brings its own risks. The same systems that safeguard data can also enable surveillance. To preserve the democratic character of its digital order, India must ensure that localisation does not devolve into control. Transparent institutions, independent oversight, and an informed citizenry are essential to keep sovereignty from sliding into authoritarianism.

If implemented in the spirit of consent and accountability, the DPDPA can become a global benchmark for democratic data governance. India’s challenge is to protect both national interests and individual rights proving that sovereignty and liberty are not opposites but partners in the digital age.

Local Is the New Global

The age of digital globalisation is drawing to a close. The internet that once symbolised global unity has splintered into regional domains of control. While some lament this as regression, it may represent a necessary correction; a move toward a fairer, more plural order where nations reclaim agency over their digital futures.

India’s evolution captures this shift vividly. From being a consumer of foreign technologies, it has become a producer of global digital norms. Its hybrid model, open yet sovereign, innovative yet accountable; offers a pathway for other democracies navigating the same dilemmas of dependence and autonomy.

When Amit Shah’s office chose Zoho Mail, it did more than endorse an Indian company; it affirmed a philosophy: that the independence India achieved in the twentieth century must now be defended in the digital realm. In an era where information is power, self-reliance in technology is self-respect in politics.

If the twentieth century globalised capital, the twenty-first is territorialising data. And in this re-territorialised world, India’s digital republic stands as a model for others, a testament that local is indeed the new global, and that sovereignty in the information age begins with the courage to build, own and trust our own platforms.