TO the average commuter, a navigation app is simply a convenience, a digital co-pilot that helps dodge morning traffic jams and speed traps.
But when a government moves to restrict civil servants from using a platform like Waze, it highlights a fundamental reality of the 21st century: geospatial data is no longer just traffic information. It can also be strategic intelligence.
The government’s recent directive prohibits civil servants from using Waze while carrying out official duties, citing cybersecurity and data protection concerns.
The decision has sparked debate over whether the restriction is a necessary precaution or an unnecessary complication for a routine commuting tool.
Yet dismissing the policy as an inconvenience overlooks the broader national security question.
Navigation apps can collect information such as users’ locations, journeys and movement patterns.
When aggregated, such data could potentially reveal patterns of activity around government offices, critical infrastructure and other sensitive locations. In an era when data is a geopolitical asset, protecting public-sector information is a legitimate security consideration.
However, identifying a potential risk is not the same as demonstrating that it has been exploited.
Waze has rejected claims that it collects sensitive government information or allows users’ data to be misused, saying it operates under privacy policies and international data protection standards.
The challenge, therefore, is to assess the actual risks and determine whether the measures taken are proportionate to them.
A security policy is only as effective as its implementation. Restricting a deeply embedded, crowdsourced navigation app also raises practical questions about how public servants will travel efficiently while carrying out their duties.
For more than a decade, Waze has relied on information contributed by road users to provide real-time traffic updates and routing suggestions.
Moving away from an established platform inevitably creates friction, particularly if the alternatives cannot match its coverage, accuracy and responsiveness.
This is where the policy’s real test, and its biggest opportunity, lies.
The government has encouraged the use of TuJu, a local navigation app developed by the Malaysian Highway Authority in collaboration with Prosignal Consortium Sdn Bhd.
However, TuJu experienced technical disruptions following a surge in users after the recommendation, prompting its developers to work on improving system stability, route accuracy and the overall user experience.
These challenges underline an important point: a homegrown digital solution must be more than a patriotic alternative. It must be reliable, intuitive, accurate and capable of handling demand.
Users will not trust a platform simply because it is locally developed. They need it to work when they need it.
That requires robust privacy safeguards, transparent data governance and sustained investment in infrastructure. It also requires a critical mass of active users to support useful, timely traffic information.
Sovereign technology cannot survive on national duty alone. It must earn users’ confidence through performance.
The restriction should therefore be viewed not merely as an app prohibition, but as an opportunity to reconsider how Malaysia manages its digital footprint.
True cyber-resilience is not achieved simply by switching off foreign platforms. It requires building secure, competitive alternatives and establishing clear standards for how location data is collected, stored, accessed and protected.
This also means being precise about the policy’s scope. The restriction applies to civil servants conducting official government business, not to the public at large.
Digital Minister Gobind Singh Deo has also clarified that civil servants are not limited to TuJu and may use other navigation applications, including Google Maps, for official duties.
Such distinctions matter. Public trust is strengthened when security measures are clearly explained, supported by evidence and accompanied by practical alternatives.
If the directive becomes a catalyst for serious investment in local software and stronger data governance, short-term adjustments could yield long-term benefits.
But the goal should not be to replace one app with another merely to satisfy a directive. It should be to create a digital ecosystem that can protect sensitive information without compromising everyday utility.
Knowing how to navigate our roads is important. Understanding who holds our journey data, how it may be used and what safeguards protect it is just as essential. ‒ Oct 23, 2026
The author is an English Language Lecturer at the Centre of Foundation Studies, Universiti Malaya (PASUM).
The views expressed are solely of the author and do not necessarily reflect those of Focus Malaysia.
Main image: Pexels/Technobulka
