From Data to Cloud Sovereignty: A Framework for Secure and Compliant Cloud Adoption in South Africa

The growing adoption of cloud computing poses significant challenges to maintaining national control over data, raising concerns about digital and cloud sovereignty. This study examines the shift from data sovereignty to digital and cloud sovereignty in South Africa, focusing on the interplay among technological, legal, and policy developments. Through a systematic literature review, the paper distinguishes between these concepts, analyse strategies to ensure digital sovereignty, and highlights governance mechanisms, tools, and technical controls for protecting data sovereignty in cloud environments. To address these gaps, the study proposes the Layered Cloud Sovereignty Enforcement Model, which integrates proactive, monitoring, and automated policy enforcement layers within a comprehensive governance framework. This model improves proactive compliance, operational efficiency, transparency, and flexibility across government sectors. Findings suggest that cloud sovereignty can be achieved through coordinated regulation, governance, and technology, thereby establishing a secure and scalable foundation for digital transformation, protecting national data, and building public trust.