Follow us on Instagram, TikTok, and WhatsApp for the latest stories and breaking news.
The government's recent decision to prohibit civil servants from using Waze during official duties has triggered a broader debate regarding location data privacy, as experts warn that navigation apps can map users' movement habits and expose activity around sensitive national installations
Academy of Sciences Malaysia fellow Emeritus Professor Datuk Dr Mohamed Ridza Wahiddin said the administrative ban was based on a technical risk assessment involving data collection practices, legal jurisdiction, and algorithmic movement profiling, according to the New Straits Times.
He cited a 2020 study by researcher Peter Gasper, which demonstrated how Waze users' movements could be tracked under specific conditions.
While this finding does not prove that the vulnerabilities are being actively exploited, Mohamed Ridza noted that the underlying tracking risks have long been established from a technical standpoint.
Emeritus Professor Datuk Dr Mohamed Ridza Wahiddin.
Image via Berita HarianHe explained that granting apps persistent access to location services through "Always" permissions can create detailed behavioural profiles, potentially revealing users' home addresses, workplaces, travel routines, and visits to restricted facilities
Enabling Waze's "Invisible" mode only hides a user's icon from public view on the map. It does not prevent the platform from collecting location data and route telemetry in the background.
Other navigation apps, such as Google Maps, carry similar privacy risks when features like Timeline or Web and App Activity tracking are enabled.
However, Google says it deletes precise location data after 30 days and excludes it from general search logs.
Cybersecurity consultant Aaron Ikram Mokhtar described the government's precautionary stance on the use of navigation apps for official duties as prudent
He noted that while individual data points might appear harmless, aggregating location data from thousands of public servants could reveal operational patterns around key government facilities.
Cybersecurity advocate Aaron Ikram Mokhtar.
Image via LinkedInLegal jurisdiction represents another key concern, as Waze's terms of service place data processing and legal disputes under Israeli jurisdiction
The government is concerned that Malaysia lacks regulatory control over how its citizens' location data is handled by entities operating under foreign legal frameworks.
However, Aaron observed that singling out Waze without publishing a comparative evaluation of other navigation platforms could weaken the policy. He suggested that a comprehensive risk assessment covering all navigation apps would provide a more robust basis for such restrictions.
The Prime Minister's Office announced the directive on 21 October, citing Waze Mobile Ltd's registration under Israeli law
The government reiterated its firm commitment to eliminating potential security vulnerabilities that foreign entities could exploit.
Malaysia joins Iraq and Iran in restricting the use of Waze. Iraq plans to enforce a full ban by 2027, potentially bringing it forward to late 2026, while Iran has previously blocked the platform entirely.