Is TuJu safer than Waze? Experts say data protection must come first
PETALING JAYA: Homegrown navigation app TuJu must prove it can protect the personal data of users before being considered a safer alternative to Waze, experts said, stressing that local ownership alone does not guarantee digital sovereignty.
International Islamic University Malaysia Ahmad Ibrahim Kulliyyah of Laws senior lecturer Assoc Prof Dr Mahyuddin Daud said TuJu should undergo independent security assessments and provide transparent privacy safeguards, particularly as it relies on foreign mapping technology.
READ MORE: ‘If Waze is dangerous, ban it nationwide’: PAS MP challenges govt
READ MORE: Malaysia will not compromise on national security risks linked to Waze – MKN
“The local alternative also deserves scrutiny. TuJu was developed by Lembaga Lebuhraya Malaysia with a private company that runs on Google’s mapping data.“
He said the Personal Data Protection Act 2010 excludes federal and state governments, raising questions about how the law applies to TuJu and its operators.
“A clear privacy notice and an independent security audit would be sensible.”
The concerns follow a government decision to prohibit civil servants from using Waze over concerns about the legal jurisdiction of the Israeli-founded app and potential risks to the location data of Malaysians.
Prime Minister Datuk Seri Anwar Ibrahim has encouraged the public to consider TuJu, although no nationwide ban on Waze has been imposed.
International Islamic University Malaysia international relations expert Assoc Prof Dr Mohd Yazid Zul Kepli said the move could strengthen the digital sovereignty of Malaysia if used as part of a broader strategy to reduce dependence on foreign technology.
He said digital sovereignty depends on who controls the data and infrastructure, not simply who owns the app.
“Even locally developed apps may depend on foreign cloud services, mapping infrastructure or software components.”
He also said similar concerns apply to navigation apps, ride-hailing platforms and social media services that collect movement and behavioural data of users.
Mahyuddin said privacy and security risks are not confined to a single navigation platform, with other mapping services, social media apps, fitness trackers and data brokers potentially collecting similarly sensitive information.
He called for consistent standards governing apps used by government personnel, rather than singling out individual platforms.
Universiti Utara Malaysia geopolitical and defence analyst Assoc Prof Dr Mohamad Faisol Keling supported efforts to reduce dependence on foreign navigation platforms, stressing that potential security threats should be addressed before a breach occurs.
He said aggregated movement data could expose patterns involving government personnel and strategic infrastructure, raising national security concerns.
Yazid said Malaysia could draw lessons from countries that have imposed restrictions on foreign apps over national security concerns, including India, and measures adopted by the United Kingdom and European Commission to limit certain apps on official devices.
However, he also said: “The ultimate objective should not be technological isolation but technological independence, ensuring Malaysia retains meaningful control over sensitive data, critical digital infrastructure and national security decisions, regardless of whether the technology is locally or foreign-owned.”