Towards Technological Autonomy

Growing cyberattacks, increasing geopolitical tensions, and India's dependence on foreign digital infrastructure have intensified the debate on Digital Sovereignty. Recent incidents, including the 2026 hacking of Indian CCTV networks through Chinese EseeCloud software and the 2025 disruption of Nayara Energy's cloud services due to international sanctions, have highlighted the strategic risks associated with excessive reliance on foreign technologies. These developments have strengthened India's resolve to build indigenous digital capabilities and secure its critical digital infrastructure.

What is Digital Sovereignty?

Digital Sovereignty refers to a nation's ability to exercise independent and effective control over its digital infrastructure, data, communication networks, and critical technologies without undue dependence on or interference from foreign governments and multinational corporations. It enables a country to safeguard its national security, economic interests, technological autonomy, and strategic decision-making in the digital age.

Digital sovereignty rests upon three fundamental pillars. The first is Data Sovereignty, which ensures that citizens' data remains subject to domestic laws and judicial oversight. The second is Computational Sovereignty, which focuses on developing indigenous cloud computing, Artificial Intelligence (AI), and digital infrastructure. The third pillar is Technological Autonomy, which aims to establish secure domestic supply chains for hardware, software, semiconductors, and communication technologies.

Why Does India Need Digital Sovereignty?

The growing digitalisation of governance, defence, finance, and critical infrastructure has transformed technology into a strategic asset. Consequently, digital sovereignty has become essential for ensuring India's national security, economic resilience, and technological independence.

Emergence of Software-Defined Warfare

Modern defence platforms, including fighter aircraft, missile systems, drones, satellites, and radar networks, increasingly depend on embedded software developed by foreign manufacturers. Such dependence creates serious national security vulnerabilities, as external vendors may theoretically possess the capability to disable or manipulate critical defence systems through hidden software controls or "kill switches."

India's experience during the 1999 Kargil War, when access to GPS support was denied by the United States, demonstrated the strategic risks associated with dependence on foreign digital technologies. This experience continues to influence India's pursuit of indigenous technological capabilities.

Data Governance and Jurisdictional Challenges

Many countries assume that data localisation alone is sufficient for digital sovereignty. However, merely storing data within India's territorial boundaries does not guarantee complete control over it.

For instance, under legislations such as the United States CLOUD Act, American technology companies may be legally compelled to provide access to data requested by U.S. authorities, irrespective of whether the servers are physically located in India. Consequently, true digital sovereignty requires not only domestic data storage but also legal and technological independence.

Reducing Dependence on Foreign Digital Infrastructure

India's heavy reliance on foreign cloud service providers exposes critical sectors to geopolitical risks. The 2025 Nayara Energy incident, in which cloud services were reportedly suspended because of international sanctions, demonstrated how external political decisions can disrupt essential economic infrastructure within India.

Such incidents underline the importance of developing indigenous cloud infrastructure capable of supporting critical government services, financial institutions, and strategic industries.

Preventing Algorithmic Hegemony

Artificial Intelligence increasingly influences governance, policymaking, judicial systems, healthcare, education, and business decision-making. Dependence on foreign AI models may result in the incorporation of external cultural assumptions, legal principles, and political biases into domestic decision-making processes.

Developing sovereign AI models ensures that AI systems reflect India's constitutional values, linguistic diversity, socio-economic realities, and strategic priorities rather than foreign interests.

Ensuring Financial Sovereignty

Recent geopolitical developments have demonstrated how international financial systems can be weaponised. Restrictions imposed through global financial messaging systems such as SWIFT illustrate the strategic vulnerability of countries dependent upon external financial infrastructure.

Strengthening indigenous payment systems like Unified Payments Interface (UPI) and expanding digital financial infrastructure enhances India's financial sovereignty and reduces vulnerability to external sanctions.

Protecting National Data and Regulatory Autonomy

Large multinational technology corporations increasingly derive enormous economic value from the personal data generated by Indian citizens. This phenomenon is often described as Digital Colonialism, where domestic data is extracted, processed abroad using proprietary technologies, and monetised in foreign markets.

Additionally, certain international trade agreements seek unrestricted cross-border data flows and limitations on source-code inspections, potentially reducing India's ability to regulate emerging technologies effectively.

Achieving Hardware Independence

Digital sovereignty cannot be realised without hardware sovereignty. India's dependence on imported semiconductors exposes critical infrastructure to risks such as hardware trojans, supply chain disruptions, export restrictions, and geopolitical tensions.

Developing domestic semiconductor manufacturing has therefore become an important national priority.

Strengthening Strategic Autonomy

According to the Power Transition Theory, emerging powers often encounter technological restrictions imposed by established global powers seeking to preserve strategic dominance.

The ongoing United States–China technology competition illustrates how technology has become an instrument of geopolitical influence. Building indigenous digital capabilities enables India to maintain strategic autonomy and pursue independent foreign and economic policies.

Major Challenges to Achieving Digital Sovereignty

Despite significant progress, India continues to face several structural challenges in establishing complete digital sovereignty.

One of the foremost challenges is the Semiconductor Chokepoint. Although the India Semiconductor Mission (ISM) is strengthening domestic chip packaging and assembly, advanced semiconductor fabrication still depends heavily on foreign technologies such as Extreme Ultraviolet (EUV) lithography and specialised precision chemicals. This dependence leaves India vulnerable to export controls and technology restrictions.

Another challenge arises from the country's Cable Sovereignty Deficit. More than 95% of India's international internet traffic travels through undersea submarine cables. The absence of an indigenous cable-repair fleet increases vulnerability to disruptions caused by sabotage, natural disasters, or military conflicts.

India also faces an AI Compute Gap. While the IndiaAI Mission is establishing sovereign computing infrastructure through approximately 38,000 Graphics Processing Units (GPUs), this capacity remains significantly smaller than the investments made annually by global technology giants, which spend tens of billions of dollars on AI infrastructure.

A further concern is the inability to inspect the proprietary source code of foreign software deployed in critical sectors such as banking, aviation, telecommunications, and power generation. This creates a "black box" situation where hidden vulnerabilities may remain undetected.

The emergence of Quantum Computing introduces another major challenge. Future quantum computers could potentially break conventional encryption methods through "Harvest Now, Decrypt Later" attacks. Migrating India's critical infrastructure to Post-Quantum Cryptography (PQC) will require substantial financial resources and technical expertise.

India also encounters a Regulatory Reciprocity Paradox during international trade negotiations, where developed countries frequently advocate unrestricted data flows and oppose mandatory source-code disclosures, creating tension with India's sovereign digital policy objectives.

Limited participation in global standard-setting institutions such as the International Telecommunication Union (ITU) further constrains India's influence over future technologies like 5G, 6G, Artificial Intelligence, and Internet of Things (IoT).

Finally, India continues to experience shortages of patient capital, deep-tech investment, and specialised scientific talent in emerging fields such as quantum computing, semiconductor physics, and advanced materials.

Government Initiatives Promoting Digital Sovereignty

Recognising these challenges, the Government of India has launched several initiatives to strengthen indigenous digital capabilities.

The India Semiconductor Mission (ISM) aims to establish a robust domestic semiconductor manufacturing ecosystem and reduce dependence on imported chips.

The IndiaAI Mission seeks to create sovereign AI infrastructure while supporting indigenous language models such as BharatGen and BHASHINI, thereby promoting AI applications across Indian languages.

The National Critical Mineral Mission (NCMM) focuses on securing strategic minerals such as lithium, cobalt, nickel, and rare earth elements, which are essential for semiconductors, batteries, and advanced electronics.

India's globally acclaimed Digital Public Infrastructure (DPI), comprising Aadhaar, Unified Payments Interface (UPI), DigiLocker, Account Aggregator, and the Open Network for Digital Commerce (ONDC), provides open, interoperable digital platforms that reduce dependence on private technology monopolies.

The MeghRaj Government Cloud (GI Cloud) enables secure hosting of government data within sovereign domestic infrastructure.

To prepare for emerging cybersecurity threats, the National Quantum Mission (NQM) and the Post-Quantum Cryptography (PQC) Roadmap (2026) seek to transition India's critical information infrastructure towards quantum-resistant encryption systems.

The National Critical Information Infrastructure Protection Centre (NCIIPC) continuously monitors cyber threats, audits critical infrastructure, and strengthens national cyber resilience.

The Digital Personal Data Protection (DPDP) Act, 2023 establishes India's legal framework for data protection, privacy, and cross-border data governance under Indian jurisdiction.

India is also expanding trusted international technology partnerships, including participation in initiatives such as Pax Silica, to build resilient semiconductor and AI supply chains.

Way Forward

India's digital sovereignty strategy must extend beyond data localisation towards achieving comprehensive technological self-reliance. Public and private investments in semiconductor fabrication, Artificial Intelligence, quantum computing, cybersecurity, cloud infrastructure, and indigenous software ecosystems should be significantly enhanced.

Simultaneously, India must strengthen its participation in international technology governance institutions to influence emerging global standards. Developing a strong domestic innovation ecosystem through increased Research and Development (R&D) expenditure, deep-tech financing, startup support, and skilled human capital will be critical.

Finally, digital sovereignty should be viewed not as technological isolation but as strategic technological resilience, enabling India to collaborate globally while retaining independent control over its critical digital assets.

Conclusion

In the twenty-first century, digital infrastructure has become as strategically important as physical infrastructure. India's experience with cyberattacks, global geopolitical tensions, and technological dependencies demonstrates that Digital Sovereignty is no longer merely a technological aspiration but a national security imperative. Through initiatives such as the India Semiconductor Mission, IndiaAI Mission, Digital Public Infrastructure, National Quantum Mission, and the Digital Personal Data Protection Act, India is laying the foundation for an independent, secure, and resilient digital ecosystem. Sustained investment in indigenous innovation, strategic technologies, and institutional capacity will enable India to emerge as a globally competitive digital power while safeguarding its sovereignty in the digital age.