Malaysia Bans Civil Servants From Using Waze Over Security

The Malaysian government has barred civil servants from using the Waze navigation application with immediate effect following data security concerns. The directive was issued via an official circular dated 20 October 2026 by Chief Secretary to the Government Tan Sri Shamsul Azri Abu Bakar, following a National Cyber Security Committee (JKSN) meeting chaired by Prime Minister Datuk Seri Anwar Ibrahim. National Cyber Security Agency (NACSA) chief executive Megat Zuhairy Megat Tajuddin confirmed the ban, which instructs all ministry secretaries-general and departmental heads to enforce compliance immediately. The decision comes alongside government encouragement for the public to adopt TuJu, a navigation app developed locally by the Malaysian Highway Authority (LLM).

Key Facts

Why Has Malaysia Banned Civil Servants From Waze?

The ban stems directly from national security considerations regarding the storage and jurisdiction of citizens' movement data. During the JKSN meeting on 20 October 2026, Prime Minister Anwar Ibrahim highlighted vulnerabilities surrounding information governance, noting specifically that Waze operates subject to Israeli laws, which creates jurisdictional concerns for official government travel telemetry.

The meeting also addressed broader infrastructure challenges, including the security architecture of MyDigital ID and defensive preparations against threats from quantum computing and autonomous artificial intelligence.

Civil servants across all ministries are prohibited from using Waze due to movement data jurisdiction concerns under foreign statutory frameworks.

What Is the TuJu Alternative Promoted by the Government?

TuJu is a sovereign navigation application developed by the Malaysian Highway Authority (LLM) to provide route planning without routing sensitive spatial telemetry through foreign corporate entities. Prime Minister Anwar Ibrahim has encouraged the Malaysian public to transition to the local software as a secure alternative to foreign navigation platforms.

The circular requires ministry secretaries-general and departmental heads to supervise subordinates to guarantee immediate enforcement. At present, the government has not stated whether the restriction will eventually extend to the broader public or include further commercial operational constraints.

The Malaysian Highway Authority developed the TuJu app as a domestic alternative to retain civil service movement data within local systems.

What It Means for Malaysian Buyers

For Malaysian civil servants, compliance requires removing or ceasing the operational use of Waze on devices used for official duties and switching to alternative navigation platforms such as TuJu. For private consumers and non-governmental enterprise drivers, the service remains accessible, as authorities have not expanded the ban to general road users.

Whether TuJu can match established platforms in crowd-sourced incident reporting, live traffic density updates, and integration remains unconfirmed. The public has received an official recommendation rather than a statutory restriction, leaving consumer access unchanged for the present.

The prohibition applies exclusively to public sector personnel, leaving private enterprise and consumer navigation choices legally unrestricted.

Common Questions

Does the Waze ban apply to all Malaysian citizens?

No, the ban applies strictly to civil servants across government ministries and departments. Private citizens and enterprise drivers remain legally unrestricted, though Prime Minister Anwar Ibrahim has encouraged the general public to consider domestic alternatives.

Who developed the recommended alternative application TuJu?

TuJu was developed locally by the Malaysian Highway Authority (Lembaga Lebuhraya Malaysia or LLM). The government highlighted it during the National Cyber Security Committee meeting as a sovereign alternative for domestic navigation.

What prompted the immediate implementation of this directive?

The directive followed a National Cyber Security Committee meeting on 20 October 2026. Discussions centred on data sovereignty, noting Waze is subject to Israeli laws, alongside broader reviews of MyDigital ID and quantum computing risks.

Sources and Methodology

Primary reporting sourced from Lowyat.NET and confirmed statements given by National Cyber Security Agency (NACSA) chief executive Megat Zuhairy Megat Tajuddin to The Star regarding the circular issued 20 October 2026. Content verified on 21 October 2026. No currency conversions were required as no commercial pricing was cited in official government directives.