WILLEMSTAD – MFK parliamentarian Sandy Losiabaar is urging the government to take a closer look at how Curaçao stores, manages, and protects its digital data, warning that excessive dependence on foreign technology providers could pose risks to national security, privacy, and digital sovereignty.
In a statement issued Wednesday, Losiabaar said the issue is becoming increasingly important as governments around the world seek greater control over their digital infrastructure and sensitive information.
According to the MP, Curaçao should carefully evaluate the extent to which government data is dependent on American technology companies for storage, processing, and cybersecurity services.
Losiabaar pointed to developments in Europe, where policymakers are moving toward stronger digital sovereignty policies designed to reduce dependence on non-European technology providers and keep sensitive government information under greater local or regional control.
“The choice of a cloud provider or the location where servers are hosted may appear to be a purely technical decision, but it can have significant legal and strategic consequences,” Losiabaar said.
He specifically referenced the U.S. CLOUD Act of 2018, which allows American authorities to request access to data held by U.S.-based technology companies, regardless of where that data is physically stored.
According to Losiabaar, this means the debate over digital sovereignty extends beyond technology and touches on issues such as governance, privacy, cybersecurity, operational continuity, and the protection of national interests.
The parliamentarian argued that sectors handling sensitive information—including government agencies, healthcare institutions, educational organizations, the justice system, and financial services—must take additional precautions to ensure data remains adequately protected.
He noted that the European Union is implementing stricter requirements regarding the storage and processing of sensitive financial, judicial, and healthcare data as part of broader efforts to strengthen technological independence.
Losiabaar believes Curaçao should conduct a comprehensive review of its digital infrastructure and focus on three key areas: data sovereignty, operational independence, and technological self-reliance.
Regarding data sovereignty, he says the government should determine who has legal access to government information, under what conditions that access is granted, and who controls the physical infrastructure that connects public institutions.
He also advocates strengthening local digital infrastructure through measures such as obtaining Curaçao’s own Autonomous System Number (ASN), implementing IPv6 and DNSSEC security protocols, and ensuring local internet traffic remains on-island through internet exchange points.
The second area involves reducing operational dependence on external providers and ensuring critical government systems can continue functioning even if international services become unavailable.
The third focuses on technological sovereignty, including whether Curaçao possesses sufficient expertise and capacity to manage and control its own digital systems.
According to Losiabaar, the government should not evaluate digital infrastructure solely based on cost or convenience, but should also consider privacy, cybersecurity, legal risks, operational continuity, and long-term digital independence.
“Data is a strategic asset of great value,” Losiabaar said. “A government must know where its data is stored, who has access to it, and under which jurisdiction it falls. Only then can a country maintain sovereignty and control over information that truly belongs to its people.”
The parliamentarian described the current moment as an opportunity for Curaçao to make strategic decisions that will strengthen the island’s resilience and preparedness for future digital challenges.