The New Data Frontiers: How Tech Power Shifts Shape Privacy and Surveillance in Asia

The rise of AI, biometrics, and fifth-generation wireless technology (5G) in Asia, led by China, is reshaping privacy and surveillance. States are leveraging these technologies to enhance control, often at the expense of individual privacy rights. This shift is driven by geopolitical competition, with China’s state-centric techno-governance contrasting with rights-based approaches in countries like India and Singapore. Across Asia, varied data protection laws and surveillance practices reflect diverse national priorities. Civil society groups, such as India’s Internet Freedom Foundation and Malaysia’s Sinar Project, resist excessive surveillance, advocating for stronger data protection. Asia’s privacy future depends on balancing security and rights, potentially leading to fragmented or convergent data governance. Recent developments in 2024 and 2025 highlight the maturation of Asia’s privacy laws, with many countries enacting or strengthening legislation, while regional initiatives like the Association of Southeast Asian Nations (ASEAN) Digital Economy Framework Agreement aim to harmonise standards.

While Asia stands as a powerhouse of technological innovation, with China, India, and Southeast Asian nations spearheading advances in AI, biometrics, and 5G, this digital leap forward, however, fuels a surge in state-driven surveillance, often eroding individual privacy rights in the name of security. In 2024 and 2025, a wave of new data protection laws, inspired by global standards like Europe’s GDPR, signals Asia’s push to balance innovation with privacy. As civil society groups resist overreach and nations navigate geopolitical tensions, Asia’s digital evolution is redefining global data governance.

Technological and Geopolitical Landscape in Asia

Asia is undergoing a profound transformation in its technological and geopolitical landscape, driven by rapid advancements in digital technologies and shifting power dynamics. The region’s civic space, however, faces significant challenges, with 89% of Asia’s population living in countries rated as closed, repressed, or obstructed for civic freedoms, according to the CIVICUS Monitor. Meanwhile, technological advancements, such as China’s extensive surveillance systems and AI-driven tools, are increasingly deployed for repression, enabling states to monitor and control dissent, particularly in closed civic spaces like China and Myanmar.¹

China’s technological ascent is underpinned by massive investments in AI, 5G networks, and big data analytics, positioning it as a leader in the Fourth Industrial Revolution.^{2 3} The Chinese government has prioritised technological self-reliance through initiatives like Made in China 2025, aiming to dominate key sectors such as semiconductors, AI, and robotics.⁴ For instance, DeepSeek, a Chinese AI model founded in 2023, represents a significant advancement through its open-source approach, fostering global developer collaboration while serving China’s national technological objectives.⁵

The expansion of US-based tech giants like Google, Facebook, and Amazon has significantly shaped Asia’s digital ecosystem, introducing advanced platforms and services. However, concerns over data sovereignty have driven countries like China and India to enforce local data storage and processing policies.² For instance, China’s WeChat and India’s ShareChat serve as alternatives to Facebook, offering localised social networking, while Baidu and Alibaba’s Tmall provide search and e-commerce options rivalling Google and Amazon. China’s “dual circulation” strategy fosters self-reliance by promoting domestic tech innovation, evident in initiatives like Made in China 2025, which strengthens local firms.⁶ This shift forges new technological alliances, such as China’s partnerships with Southeast Asian nations through the Belt and Road Initiative’s digital infrastructure projects, redefining the Indo-Pacific’s tech landscape.

Indeed, digital infrastructure development is another critical aspect of Asia’s tech transformation.⁷ Countries are investing heavily in building smart cities, expanding broadband connectivity, and deploying 5G networks. China has rolled out an extensive 5G network, while India is advancing its Digital India initiative to enhance digital connectivity and services.⁸ These developments enhance economic productivity but also enable sophisticated surveillance and data collection, as seen in India’s Aadhaar system, where biometric data misuse has sparked significant privacy concerns.⁹

The interplay between technology and geopolitics in Asia is complex, with technology serving as both a tool for economic growth and a means of exerting political control.¹⁰ As states, particularly the US and China, compete for technological dominance,¹¹ the delicate balance between privacy and surveillance intensifies, with significant implications for civil liberties and regional stability in Asia, home to over four billion people, or roughly 50% of the global population in 2025. The close alignment of US tech giants with the Trump administration heightens the risk of tech competition escalating into geopolitical tensions, potentially destabilizing the Indo-Pacific through trade disputes, tariff wars, and strategic tech export controls, as evidenced by ongoing US-China rivalry over semiconductors and AI.¹²

Case Studies: Varying Models of Techno-Governance

China: State-Centric Surveillance

China exemplifies a state-centric model of techno-governance, leveraging advanced technologies to maintain social order and political control. Its surveillance network includes over 700 million cameras by August 2023, with 40,000 in Xinjiang tracking Uyghurs via the Integrated Joint Operations Platform.^{13 14} China mandates foreign companies, like Apple, to store data locally and provide government access, reinforcing state control over information processing. This measure could protect citizens’ data in other nations if applied with privacy-first motives but in China prioritizes state interests. State-sponsored hacking groups like Weaver Ant and Mustang Panda deploy malware, such as those used to target India’s power grid in 2021 and steal intellectual property from Japanese firms, posing domestic and international cyber espionage threats.¹⁵¹⁶ Laws like the Cybersecurity Law (2017), Data Security Law (2021), and Personal Information Protection Law (PIPL, 2021) enable broad state access to data, with the Regulations on Network Data Security Management (effective January 1, 2025) imposing strict compliance for large datasets.¹⁷

Critics have highlighted privacy violations, notably during the COVID-19 pandemic, when health data from mobile apps and digital barcodes was used for mass tracking, raising concerns about excessive surveillance, forced isolation and lack of consent.¹⁸

India: Hybrid Models with Public-Private Partnerships

India employs a hybrid model of techno-governance through public-private partnerships, exemplified by the Aadhaar biometric identification system, covering over 1.3 billion citizens, and the Unified Payments Interface (UPI), where private companies provide payment infrastructure under government oversight.¹⁹ The Digital Personal Data Protection Act Rules seek to balance innovation and privacy. However, it faces criticism for provisions allowing government access to data for national security, which lack clear conditions, transparency, and accountability, potentially enabling unchecked surveillance.²⁰ Civil society groups, notably the Internet Freedom Foundation, actively shapes governance by challenging overreach through litigation and advocating for stronger privacy safeguards. However, weak enforcement has led to breaches,²¹ such as the 2018 Aadhaar data leaks²² exposing personal details of millions, raising human rights concerns over privacy violations and exclusion from services like food rations due to authentication failures.

In India, the burgeoning digital economy leverages vast data for innovation, but weak enforcement mechanisms lead to breaches and misuse. The Open Network for Digital Commerce (ONDC) aims to create an inclusive digital economy, yet requires robust privacy safeguards.²³

Southeast Asia: Diverse Approaches

Southeast Asia’s techno-governance models vary starkly, with ASEAN’s 2025 Digital Economy Framework Agreement seeking unified data standards.³³ Singapore’s Personal Data Protection Act (PDPA), updated in 2024, enforces strict fines for breaches, like a SGD 54,000 penalty on a ferry operator, prioritising oversight over localisation.²⁴ Vietnam’s Decree 53/2022/ND-CP mandates local data storage for telecom and e-commerce, curbing cross-border flows to bolster state control.²⁵ Indonesia adopts protectionist stances, with Regulation No. 71/2019 mandating local data storage.²⁶ Myanmar’s 2025 Cybersecurity Law enables mass surveillance by banning Virtual Private Networks (VPNs), crushing privacy and freedom of speech.²⁷ These divergent approaches challenge ASEAN’s goal of cohesive regional data governance.

Political Economy of Data

The commodification of personal information, often termed the “new oil,” is central to Asia’s digital economy. In China, the Data Security Law (2021) positions data as a strategic asset for national security and economic growth, outpacing regulatory frameworks and raising human rights concerns as states prioritize technological dominance over privacy.²⁸ Chinese tech giants like Alibaba and Tencent, mandated to share data with the government under laws like the Cybersecurity Law (2017), fuel both commercial innovation and state surveillance, amplifying privacy risks.²⁹³⁰ DeepSeek’s integration into China’s digital ecosystem highlights its potential to boost the Social Credit System by analysing massive datasets to monitor and shape citizen behaviour. This shows how fast-moving tech developments often skip safeguards, putting state control and global tech competition ahead of individual rights.³¹

Civil Society and Normative Resistance

Civil society organisations (CSOs) are crucial in advocating for digital rights and privacy in Asia, despite a shrinking civic space where 89% of the region’s population lives in countries with closed, repressed, or obstructed civic freedoms, per the CIVICUS Monitor.¹ In India, the Internet Freedom Foundation uses Supreme Court petitions to challenge government overreach, such as Aadhaar data misuse.³² Malaysia’s Sinar Project³³ monitors state surveillance, exposing tools like the Pegasus spyware used to target activists. Indonesia’s SAFENet³⁴ supports digital rights defenders against online harassment, driving legislative progress like Singapore’s PDPA updates (2024) and Indonesia’s Personal Data Protection Law (2022), with strict penalties. Yet, new technologies enable repression, as seen in

Thailand’s use of the 2022 Ministerial Decree to censor online dissent³⁵ and Myanmar’s 2025 Cybersecurity Law banning VPNs, stifling free expression³⁶. Regional initiatives like the ASEAN Digital Economy Framework Agreement (2025)³⁷ promote rights-based data governance, but enforcement gaps, such as Vietnam’s vague Decree 53/2022/ND-CP³⁸ undermine progress.

Conclusion

This research highlights the profound impact of technological advancements on privacy and surveillance in Asia. China’s state-centric model, leveraging AI and biometrics, sets a precedent influencing regional practices, while India and Southeast Asian countries develop hybrid models balancing innovation and privacy. The commodification of data, intertwined with national security and global regulatory pressures, complicates the landscape. Civil society resistance and maturing privacy laws offer hope, but challenges such as enforcement gaps persist. Asia faces a critical juncture: its path toward fragmentation or a rights-based framework will shape global data politics. Balancing innovation, security, and privacy requires collaborative efforts from states, corporations, and civil society.