TOWARDS MAQASID SHARIAH-ALIGNED ICT GOVERNANCE: A SYSTEMATIC REVIEW OF DATA SOVEREIGNTY AND DATA SAFETY IN MALAYSIA

Nur  Ilyana Ismarau Tajuddin; Nurafifah Mohd Nor; Norita Md Norwawi; Nur Aina Abdullah

doi:10.33102/jfatwa.vol31no3.891

Authors

Nur Ilyana Ismarau Tajuddin Tamhidi Centre, Universiti Sains Islam Malaysia, Nilai, Malaysia & AI and Safety for Human Development Research Group, Universiti Sains Islam Malaysia, Nilai, Malaysia
Nurafifah Mohd Nor Faculty of Science and Technology, Universiti Sains Islam Malaysia, Nilai, Malaysia
Norita Md Norwawi Faculty of Science and Technology, Universiti Sains Islam Malaysia, Nilai, Malaysia & AI and Safety for Human Development Research Group, Universiti Sains Islam Malaysia, Nilai, Malaysia
Nur Aina Abdullah Faculty of Syariah and Law, Universiti Sains Islam Malaysia, Nilai, Malaysia

DOI:

https://doi.org/10.33102/jfatwa.vol31no3.891

Keywords:

Maqasid Shariah, ICT Governance, Data Sovereignty, Data Safety, Digital Ethics

Abstract

Rapid digital transformation has accelerated innovation, economic development, and public service delivery across many countries, including Malaysia. Yet, this shift poses serious threats to data safety and data sovereignty. Following the PRISMA guideline, this study implements a Systematic Literature Review (SLR) to synthesize the evidence on data sovereignty and data safety in Malaysia’s ICT governance. Following a standard screening process, 71 relevant studies published between 2021 and 2026 were selected and analyzed to examine their relevance to ethical ICT governance in Malaysia. The selected articles were further categorized based on quality assessment criteria with a goal to deliver a complete summary of the present research landscape. This study examines existing frameworks related to ICT governance, data sovereignty, data safety, and Islamic ethical perspectives, particularly Maqasid Shariah. The findings highlight the need for a unified governance model that synthesizes regulatory governance, technical safeguards, ethical principles, and public trust. This study contributes to the development of a Maqasid Shariah-aligned ICT governance framework for Malaysia’s digital transformation agenda.

Downloads

Download data is not yet available.

References

Ababneh, M., & Aljarrah, A. (2024). Role of artificial intelligence in data protection for digital asset systems: A review of recent development. TEM Journal, 13(4), 3431–3444. https://doi.org/10.18421/TEM134-76

Abbas, A. E., Van Velzen, T., Ofe, H., Van De Kaa, G., Zuiderwijk, A., & De Reuver, M. (2024). Beyond control over data: Conceptualizing data sovereignty from a social contract perspective. Electron Markets, 34(1), 20. https://doi.org/10.1007/s12525-024-00695-2

Agarwal, A., & Nene, M. J. (2024, July). Addressing AI risks in critical infrastructure: formalising the AI incident reporting process. In 2024 IEEE International Conference on Electronics, Computing and Communication Technologies (CONECCT) (pp. 1-6). IEEE. https://doi.org/10.1109/CONECCT62155.2024.10677312

Albaroudi, E., Elbehairy, M., Al Hinnawi, M. N. E., Hatamleh, M., Mansouri, T., & Alameer, A. (2025). Empowering Data Sovereignty through Artificial Intelligence: A Framework for Sustainable Smart Energy Systems. Current Journal of Applied Science and Technology, 44(9), 77-88. https://doi.org/10.36227/techrxiv.175355730.00217604/v1

Albous, M., Al-Jayyousi, O. R., & Stephens, M. (2025). AI governance in the GCC states: a comparative analysis of national AI strategies. Journal of Artificial Intelligence Research, 82, 2389–2422. https://doi.org/10.48550/arXiv.2505.02174

Ali, F., Bouzoubaa, K., Gelli, F., Hamzi, B., & Khan, S. (2025). Islamic Ethics And AI: An Evaluation of Existing Approaches to AI Using Trusteeship Ethics. Philosophy & Technology, 38(3), 120. https://doi.org/10.1007/s13347-025-00922-4

Alibeigi, A., & Munir, A. (2020). Malaysian Personal Data Protection Act, a mysterious application. University of Bologna Law Review, 5, 362–374. https://doi.org/10.6092/issn.2531-6133/12441

Aljawi, M. F., & Santiago, F. (2025). Harmonization of National and International Law in the Utilization of AI for the Organization of Hajj A Collaborative Study Between the Governments of Indonesia and Saudi Arabia in Hajj Technology Systems. Jurnal Greenation Sosial dan Politik, 3(2), 185-194. https://doi.org/10.38035/jgsp.v3i2.356

Aloufi, A., Khan, M. A., & Hussain, B. (2025). Legal Gaps, Islamic Ethics, and Digital Trust: Building a Regulatory Framework for Saudi E-Commerce Under Vision 2030. Journal of Cultural Analysis and Social Change, 3860-3880. https://doi.org/10.64753/jcasc.v10i4.3678

Al-Shatibi (1996) Al-Muwafaqat Fi Usul al-Syariah, Vol. 2. Dar al-Ma’rifah, Beirut.

Asgarinia, H., Chomczyk Penedo, A., Esteves, B., & Lewis, D. (2023). “Who Should I Trust with My Data?” Ethical and Legal Challenges for Innovation in New Decentralized Data Management Technologies. Information, 14(7), 351. https://doi.org/10.3390/info14070351

Awais, A., Mehmood, M. U., & Goraya, M. M. (2025). Managing cyber security risks in Islamic fintech: A Shariah perspective. Contemporary Journal of Social Science Review, 3(4), 1674-1688. https://doi.org/10.63878/cjssr.v3i4.1784

Azizli, K., Gargari, E. H., Muchtar, A. H., & Sahal, A. (2025). Artificial Intelligence and Islamic Jurisprudence: A Critical Analysis of Legal and Ethical Challenges in Automated Decision-Making. Journal of Islamic Law and Legal Studies, 2(2), 134-150. https://doi.org/10.70063/jills.v2i2.117

Bandaru, V. N. R., Sumalatha, M., Rafee, S. M., Prasadraju, K., & Lakshmi, M. S. (2024). Enhancing privacy measures in healthcare within cyber-physical systems through cryptographic solutions. EAI Endorsed Transactions on Scalable Information Systems, 11(6). https://doi.org/10.4108/eetsis.5732

Bashori, Y. A., Umami, K., & Wahid, S. H. (2024). Maqasid Shariah-based digital economy model: Integration, sustainability and transformation. Malaysian Journal of Syariah and Law, 12(2), 405–425. https://doi.org/10.33102/mjsl.vol12no2.647

Batool, A., Zowghi, D., & Bano, M. (2025). AI governance: a systematic literature review. AI and Ethics, 5(3), 3265-3279. https://doi.org/10.21203/rs.3.rs-4784792/v1

Bernama. (2025, August 1). AI without accountability? Why Malaysia needs new laws. https://www.bernama.com/en/thoughts/news.php?id=2452021

Bernama. (2025, August 12). Malaysia to develop digital trust and data security strategy, establish data commission – Gobind. https://www.bernama.com/en/news.php?id=2455713

Bernama. (2026, June 24). Trend kerugian penipuan dalam talian melonjak dalam tempoh tiga tahun - KDN. https://bernama.com/radio/news.php?id=2572388

Bobbert, Y., & Timmermans, T. (2024, November). Overcoming the Fear of Missing Out on Data. In Proceedings of the Future Technologies Conference (pp. 90-98). Cham: Springer Nature Switzerland. https://doi.org/10.1007/978-3-031-73128-0_7

Cyber Security Act 2024 (Act 854) (Malaysia). https://www.nacsa.gov.my/act854.php

Cyber Security (Notification of Cyber Security Incident) Regulations 2024, P.U. (A) 220/2024 (Malaysia). https://www.nacsa.gov.my/act854.php

CyberSecurity Malaysia. (2023). Cyber security incident statistics report.

Dahlan, H. A., Dahlan, H. A., & Dahlan, N. K. (2025). Modeling Ai-Generated Misinformation: Shariah, Ethical and Forensic Perspectives from Malaysia. LexForensica: Journal of Forensic Justice and Socio-Legal Research, 2(2), 74-84. https://doi.org/10.33102/yy54vr91

Darus, M., Husin, N. K., Abidin, N. H., Khadzali, N. R., & Madan, M. (2024). Ethical governance through Maqasid Shariah perspective: A conceptual framework. International Journal of Academic Research in Business and Social Sciences, 14(10). https://doi.org/10.6007/IJARBSS/v14-i10/23148

Dash, B., Ansari, M. F., Sharma, P., & Ali, A. (2022). Threats and opportunities with AI-based cyber security intrusion detection: a review. International Journal of Software Engineering & Applications (IJSEA), 13(5). https://doi.org/10.5121/ijsea.2022.13502

Data Sharing Act 2025 (Act 864) (Malaysia). https://www.jdn.gov.my/en/data-sharing-act-2025-act-864/

Daud, M. (2025). A Legal Framework for Public Sector Data Sharing in Malaysia: The Clash Between Data Protection, Privacy and Public Interest. IIUM Law Journal, 33(2), 279-320. https://doi.org/10.31436/iiumlj.v33i2.1072

De Colle, G. (2024, May). Towards an Ontology of Data Sovereignty and Ownership in Cyberspace. In European Semantic Web Conference (pp. 55-63). Cham: Springer Nature Switzerland. https://link.springer.com/chapter/10.1007/978-3-031-78955-7_6

Del Re, E. (2024). Technologies of data protection and institutional decisions for data sovereignty. Information, 15(8), 444. https://doi.org/10.3390/info15080444

Durango, I., Gallud, J. A., & Penichet, V. M. (2024). Human-data interaction framework: A comprehensive model for a future driven by data and humans. arXiv preprint. https://doi.org/10.48550/arXiv.2407.21010

Dusuki, A. W., & Bouheraoua, S. (2021). The framework of Maqasid Shariah and its implication for governance and public policy. Journal of Islamic Ethics, 5(2), 173–190. https://doi.org/10.52282/icr.v2i2.651

Elgujja, A., & Alkali, U. (2025). Privacy-by-Design, Digital Dignity, and Algorithmic Justice in Healthcare AI: A Comparative Legal, Ethical, and Technical Analysis of Saudi Arabia and Nigeria. https://dx.doi.org/10.2139/ssrn.5979295

Elgujja, A. A., Alshahrani, F. S., Arimoro, A., Hersi, A., Musa, H., & Ezreqat, S. A. (2026). Ethical and Legal Implications of Artificial Intelligence in Infection Prevention and Control: A Saudi Arabian Perspective. Journal of Nature and Science of Medicine, 9(3), 291–299. https://doi.org/10.4103/jnsm.jnsm_239_25

Farid, A. M., Pratama, F. A., & Sulistyowati, D. (2025). Maqashid Sharia Analysis on Personal Data Protection from the Dangers of Artificial Intelligence Misuse. Jurnal Penelitian Ilmu-Ilmu Sosial, 6(2), 179-192. https://doi.org/10.23917/sosial.v6i2.12636

Fatarib, H., Ardhiansyah, M. F., Maulidini, A., & Riyandani, S. (2025, December). Qiyas As a Method of Digital Ijtihad for Social Sustainability in ASEAN In the Era of Technological Disruption. In Proceeding of ICCoLaSS: International Collaboration Conference on Law, Sharia and Society (Vol. 4, No. 1, pp. 26-45).

Figueroa, V., Sanchez Crespo, L. E., Santos-Olmo, A., Rosado, D. G., & Fernandez-Medina, E. (2025). Building a holistic cybersecurity framework for e-Government based on a systematic analysis of proposals. International Journal of Information Security, 24(3), 121. https://doi.org/10.1007/s10207-025-01024-0

Formosa, P., Wilson, M., & Richards, D. (2021). A principlist framework for cybersecurity ethics. Computers & Security, 109, 102382. https://doi.org/10.1016/j.cose.2021.102382

Fouad, N. S. (2025). Failing better in the infosphere: ontological uncertainties and the essence of security in cyberspace. Information, Communication & Society, 1-18. https://doi.org/10.1080/1369118X.2025.2492574

Gonzalez-Granadillo, G., Menesidou, S. A., Papamartzivanos, D., Romeu, R., Navarro-Llobet, D., Okoh, C., Nifakos, S., Xenakis, C., & Panaousis, E. (2021). Automated Cyber and Privacy Risk Management Toolkit. Sensors, 21(16), 5493. https://doi.org/10.3390/s21165493

Gorian, E., & Osman, N. D. (2024). Digital ethics of artificial intelligence (AI) in Saudi Arabia and United Arab Emirates. Malaysian Journal of Syariah and Law, 12(3), 583-597. https://doi.org/10.33102/mjsl.vol12no3.798

Hadi, A. S. A., Masum, A., & Arowosaiye, Y. I. (2025). The Artificial Intelligence and Dispute Resolution in Brunei: Assessing Readiness, Legal Reform, and the Way Forward. Indonesia Law Reform Journal, 5(2), 189-208. https://doi.org/10.22219/ilrej.v5i2.40541

Hamza, S. M. An AI-Driven Blockchain Framework for Intelligent Halal Data Governance and Digital Evidence Integrity Across the Halal Supply Chain.

Harun, Q. N. (2025). Menilai semula kedaulatan data Malaysia: Kritikan struktural terhadap Akta Perkongsian Data 2025: Reassessing Malaysia’s data sovereignty: A structural critique of the Data Sharing Act 2025. International Journal of Interdisciplinary and Strategic Studies, 6(10), 631-657. https://doi.org/10.47548/ijistra.2025.98

Hippelainen, L., Oliver, I., & Lal, S. (2017, July). Towards dependably detecting geolocation of cloud servers. In International Conference on Network and System Security (pp. 643-656). Cham: Springer International Publishing. https://doi.org/10.1007/978-3-319-64701-2_51

Hoong, Y., & Rezania, D. (2024). Navigating cybersecurity governance: the influence of opportunity structures in socio-technical transitions for small and medium enterprises. Computers & Security, 142, 103852. https://doi.org/10.1016/j.cose.2024.103852

Huawei Technologies Malaysia, & Malaysia Digital Economy Corporation (MDEC). (2022). Malaysia: Towards becoming ASEAN’s digital capital: Value creation for ASEAN digital growth.

Hummel, P., Braun, M., Tretter, M., & Dabrock, P. (2021). Data sovereignty: A review. Big Data & Society, 8(1). https://doi.org/10.1177/2053951720982012

Jansen, B., Kadenko, N., Broeders, D., Van Eeten, M., Borgolte, K., & Fiebig, T. (2023). Pushing boundaries: An empirical view on the digital sovereignty of six governments in the midst of geopolitical tensions. Government Information Quarterly, 40(4). https://doi.org/10.1016/j.giq.2023.101862

Kannike, U. M. M., & Fahm, A. O. (2025). Exploring the ethical governance of artificial intelligence from an Islamic ethical perspective. Jurnal Fiqh, 22(1), 134-161. https://doi.org/10.22452/fiqh.vol22no1.5

Krotov, V., & Johnson, L. (2023). Big web data: Challenges related to data, technology, legality, and ethics. Business Horizons, 66(4), 481-491. https://doi.org/10.1016/j.bushor.2022.10.001

Lam, W. M. W., & Seifert, J. (2023). Regulating data privacy and cybersecurity. The Journal of Industrial Economics, 71(1), 143-175. https://doi.org/10.1111/joie.12316

Leicht, J., Wagner, M., & Heisel, M. (2023, September). Creating privacy policies from data-flow diagrams. In European Symposium on Research in Computer Security (pp. 433-453). Cham: Springer Nature Switzerland. https://doi.org/10.1007/978-3-031-54204-6_26

Malay Mail. (2023, December 8). Socso confirms cyberattack, claims leaked data is questionable and incomplete. https://www.malaymail.com/news/malaysia/2023/12/08/socso-confirms-cyberattack-claims-leaked-data-is-questionable-and-incomplete/106563

Malaysian Bar. (2025, June 25). Press statement: Rebuilding the public trust deficit with regard to personal data collection [Press release]. https://www.malaysianbar.org.my/article/news/press-statements/press-statements/press-statement-rebuilding-the-public-trust-deficit-with-regard-to-personal-data-collection

Maman, N. E., & Susila, W. D. A. P. (2025). Artificial Intelligence and Machine Learning in Financial Industry Transformation: A Comparative Analysis of Conventional and Sharia Fintech in Indonesia. Journal of Finance and Islamic Banking, 8(2), 141-158. https://doi.org/10.22515/jfib.v8i2.12901

Mia, M. H., Hossain, K. A., & Ali, M. M. (2026). Designing Ethical AI-Integrated Cybersecurity Education: A Qur’anic Values Informed Framework for Responsible Digital Learning. https://doi.org/10.21203/rs.3.rs-9305391/v1

Micheal, Lee. (2024). Cross-Border Data Transfer Risks and Compliance Solutions for Cloud-Based Generative AI.

Ministry of Digital Malaysia. (2025, October 11). Allocations in Belanjawan MADANI 2026 set to spur Malaysia’s digital transformation [Press release]. https://www.digital.gov.my/en-GB/siaran/Peruntukan-Dalam-Belanjawan-Madani-2026-Akan-Merangsang-Transformasi-Digital-Malaysia

Ministry of Science, Technology and Innovation (MOSTI). (2024). The national guidelines on AI governance and ethics (AIGE). https://mastic.mosti.gov.my/publication/the-national-guidelines-on-ai-governance-ethics/

Misra, S., Barik, K., & Kvalvik, P. (2025). Trust in Digital Sovereignty: A Review of Security, Privacy, and Governance Challenges. Public Organization Review, 1-23. https://doi.org/10.1007/s11115-025-00968-0

Mohadi, M., & Tarshany, Y. M. A. (2023). Maqasid al-Shari’ah and the ethics of artificial intelligence: Contemporary challenges. Journal of Contemporary Maqasid Studies, 2(2), 79–102. https://doi.org/10.52100/jcms.v2i2.107

Mohiqi, M. M. (2023). Data's nature and its prevailing right under Islamic law. International Journal of Multicultural and Multireligious Understanding, 10(3), 221–230. https://doi.org/10.18415/ijmmu.v10i3.4559

Molitor, D., Raghupathi, W., Saharia, A., & Raghupathi, V. (2023). Exploring Key Issues in Cybersecurity Data Breaches: Analyzing Data Breach Litigation with ML-Based Text Analytics. Information, 14(11), 600. https://doi.org/10.3390/info14110600

Mujahid, A. R., Mustofa, T. A., & Jinan, M. (2025). Islamic Ethical Values as The Foundation for The Use of Artificial Intelligence in Islamic Boarding School Education. Proceeding ISETH (International Summit on Science, Technology, and Humanity), 1124-1132. https://doi.org/10.23917/iseth.6916

Mustapha, R., Karim, S., Ibrahim, N., Burhan, N., & Hayati, N. (2025). Islamic perspectives on AI and cybersecurity: Developing ethical frameworks for autonomous security systems. International Journal of Law Government and Communication, 10(40), 590-604. https://doi.org/10.35631/IJLGC.1040041

MyCERT. (2025, February 27). Cyber incident quarterly summary report Q4 2024 (Report No. SR-029.022025). CyberSecurity Malaysia. https://www.mycert.org.my/portal/advisory?id=SR-029.022025

New Straits Times. (2024, March 25). Sarawak seeks clarification on security of information collected for PADU. https://www.nst.com.my/news/nation/2024/03/1030251/sarawak-seeks-clarification-security-information-collected-padu

New Straits Times. (2025, July 15). AI deepfakes of PM, tycoons used in scams. https://www.nst.com.my/news/nation/2025/07/1240382/ai-deepfakes-pm-tycoons-used-scams

Nugraha, Y., & Martin, A. (2022). Cybersecurity service level agreements: understanding government data confidentiality requirements. Journal of Cybersecurity, 8(1), tyac004. https://doi.org/10.1093/cybsec/tyac004

Nugroho, B. S., & Al-Giffari, H. A. (2026). Institutionalizing Artificial Intelligence within Indonesia’s Zakat Architecture: Navigating Regulatory Challenges and Sharia Compliant Implementation. Indonesian Journal of Islamic Economic Law, 3(1), 113-143. https://doi.org/10.23917/ijoel.v3i1.13927

Osman, R. A. H., Zakariyah, L., Zakariyah, H., & Dahlan, A. R. A. (2021). Cyber security and Maqasid al-Shariah: A case of Facebook application. International Research Journal of Shariah, Muamalat and Islam (IRJSMI), 3(6), 12–25. https://gaexcellence.com/irjsmi/article/view/91

Othman, A. (2025). Data Sovereignty and National Cloud Strategy: The Case of Malaysia. https://doi.org/10.13140/RG.2.2.33060.13442

Pahune, S., Akhtar, Z., Mandapati, V., & Siddique, K. (2025). The importance of AI data governance in large language models. Big Data and Cognitive Computing, 9(6), 147. https://doi.org/10.3390/bdcc9060147

Personal Data Protection Act 2010 (Act 709) (Malaysia). https://www.pdp.gov.my/ppdpv1/en/akta/pdp-act-2010-en/

Pestana, G., & Sofou, S. (2024). Data governance to counter hybrid threats against critical infrastructures. Smart Cities, 7(4), 1857-1877. https://doi.org/10.3390/smartcities7040072

Pierucci, F. (2025). Sovereignty in the Digital Era: Rethinking Territoriality and Governance in Cyberspace. Digital Society, 4(1), 1-19. https://doi.org/10.1007/s44206-025-00189-4

Pool, J., Akhlaghpour, S., Fatehi, F., & Burton-Jones, A. (2024). A systematic analysis of failures in protecting personal health data: A scoping review. International Journal of Information Management, 74, 102719. https://doi.org/10.1016/j.ijinfomgt.2023.102719

Porcedda, M. G. (2023). Cybersecurity, Privacy and Data Protection in EU Law.

Qiu, Y., & Hu, Z. (2025). Progress and recommendations in data ethics governance: a transnational analysis based on data ethics frameworks. Humanities and Social Sciences Communications, 12(1), 1-11. https://doi.org/10.1057/s41599-025-05664-4

Raquib, A., Channa, B., Zubair, T., & Qadir, J. (2022). Islamic virtue-based ethics for artificial intelligence. Discover Artificial Intelligence, 2(1), 11. https://doi.org/10.1007/s44163-022-00028-2

Rizk, A. M. (2026). Integrating Artificial Intelligence into Credit Risk Assessment (A Comparative Study of Islamic and Conventional Banks). Ajrsp, 7(82), 05-26. https://doi.org/10.52132/Ajrsp.e.2026.82.1

Rofiq, A. F. N., Rahman, M. S., Shaikh, A. Y., Barry, M. B., & Zeki, A. M. (2025). Online Data Privacy Ethical Guidelines based on Islamic Perspectives. International Journal on Islamic Applications in Computer Science and Technology, 13(2).

Samonte, M. J., Alvaran, R. M., Imutan, J., & Savellano, R. G. (2024, July). Building a privacy-centric systems integration and architecture. In Proceedings of the 2024 12th International Conference on Computer and Communications Management (pp. 121-131). https://doi.org/10.1145/3688268.3688287

Saqib, H. M., & Amin, H. (2026). Comparative analysis of AI regulation for fintech cybersecurity and privacy in the European Union and Qatar. Discover Artificial Intelligence. https://doi.org/10.1007/s44163-025-00736-5

Sawari, M. F. M., Shamsuddin, M. M. J., & Robbi, A. A. M. (2025). Integrating Maqāṣid al-Sharīʿah and governance principles: a framework for SME Shariah financial compliance. International Journal of Fiqh and Usul Al-Fiqh Studies, 9(3), 97-116. https://doi.org/10.31436/ijfus.v9i3.408

Schubert, K. D., & Barrett, D. (2024). Data governance, privacy, and ethics. In Human Privacy in Virtual and Physical Worlds: Multidisciplinary Perspectives (pp. 87-110). Cham: Springer Nature Switzerland. https://doi.org/10.1007/978-3-031-51063-2_5

Sharif, A., & Badi, S. (2025). The Digital Evolution of Financial Crime: How Cross-Border Fraud is Reshaping Cybersecurity. https://doi.org/10.13140/RG.2.2.21643.81443

Skopik, F., Bonitz, A., Grantz, V., & Gohler, G. (2022). From scattered data to actionable knowledge: flexible cyber security reporting in the military domain. International Journal of Information Security, 21(6), 1323-1347. https://doi.org/10.1007/s10207-022-00613-7

Smolo, E. (2026). Islamic Finance in the Digital Age: Fintech as a Civilizational Tool. Religions, 17(2), 218. https://doi.org/10.3390/rel17020218

Solaiman, B., Bashir, A., & Dieng, F. (2024). Regulating AI in health in the Middle East: case studies from Qatar, Saudi Arabia and the United Arab Emirates. Research handbook on health, AI and the law, 332-354. https://doi.org/10.4337/9781802205657.ch19

Sorrentino, E., Spagnuolo, A. F., Portaro, A., Taverniti, M., & Cardillo, E. (2025, July). Towards Semantic Coherence: Understanding Cybersecurity and Digital Sovereignty in the Automotive Landscape. In 2025 IEEE 31st International Symposium on On-Line Testing and Robust System Design (IOLTS) (pp. 1-5). IEEE. https://doi.org/10.1109/IOLTS65288.2025.11116851

The Straits Times. (2022, May 18). Data of 22.5 million Malaysians born 1940–2004 allegedly being sold for US$10k. https://www.straitstimes.com/asia/se-asia/data-of-225-million-malaysians-born-1940-2004-allegedly-being-sold-for-us10k

Thomas, L., Gondal, I., Oseni, T., & Firmin, S. S. (2022). A framework for data privacy and security accountability in data breach communications. Computers & Security, 116, 102657. https://doi.org/10.1016/j.cose.2022.102657

Uddoh, J., Ajiga, D., Okare, B. P., & Aduloju, T. D. (2021). Cross-border data compliance and sovereignty: a review of policy and technical frameworks. Journal of Frontiers in Multidisciplinary Research, 2(2), 68-74. https://doi.org/10.54660/.IJFMR.2021.2.2.68-74

Verstraete, M., & Zarsky, T. (2021). Optimizing breach notification. U. Ill. L. Rev., 803.

Vostoupal, J., Stupka, V., Harasta, J., Kasl, F., Loutocky, P., & Malinka, K. (2024). The legal aspects of cybersecurity vulnerability disclosure: To the NIS 2 and beyond. Computer Law & Security Review, 53, 105988. https://doi.org/10.1016/j.clsr.2024.105988

Wahab, A. W., & Mahdiya, I. (2025). Digital Shariah governance and the future of Islamic finance: A framework for AI-driven Shariah compliance in a global regulatory environment. International Journal of Islamic Finance, 3(2), 19-31. https://doi.org/10.14421/ijif.v3i2.2777

Wang, Y., Duan, Y., Han, J., Chen, Z., Yin, M., & Zhong, G. (2025). Privacy-enhanced deep learning inference acceleration towards third-party cloud based on trusted execution environment. Peer-to-Peer Networking and Applications, 18(3), 162. https://doi.org/10.1007/s12083-025-01978-x

Waseem, U., & Rahim, A. (2025). Islamic Ethical Perspectives on AI and Digital Transformation in the 21st Century. Wah Academia Journal of Global Religions, 1(3), 31-54. https://doi.org/10.63954/4sz9d580

Wexler, R. (2022). Life, Liberty, and Date Privacy: The Global CLOUD, the Criminally Accused, and Executive versus Judicial Compulsory Process Powers. 101 Texas Law Review, 1341. https://dx.doi.org/10.2139/ssrn.4244186

Williamson, B. (2022). Governing Through Infrastructural Control: Artificial Intelligence and Cloud Computing in the Data-intensive State. Digital Society, 52(1). https://doi.org/10.4135/9781529783193.n29

Yeoh, A. (2023, December 6). Cybersecurity report ranks Malaysia as eighth most breached country in Q3 2023. The Star. https://www.thestar.com.my/tech/tech-news/2023/12/06/cybersecurity-report-ranks-malaysia-as-eighth-most-breached-country-in-q3-2023

Yusif, S., & Hafeez-Baig, A. (2021). A conceptual model for cybersecurity governance. Journal of applied security research, 16(4), 490-513. https://doi.org/10.1080/19361610.2021.1918995

Zafar, M. B., & Ali, H. (2025). Shariah governance standard on generative AI for Islamic financial institutions. SSRN Electronic Journal. https://dx.doi.org/10.1108/JIABR-03-2025-0141

Zhou, F., & Huang, J. (2024). Cybersecurity data breaches and internal control. International Review of Financial Analysis, 93, 103174. https://doi.org/10.1016/j.irfa.2024.103174