Why MKN Exempts Google Maps From Civil Servants Ban

Malaysia's National Security Council (MKN) has officially exempted Google Maps from the public sector restriction barring civil servants from using Waze during official duties, confirming the policy shift on 23 October 2026. Despite parent company Alphabet owning both navigation platforms, the Malaysian government established that differing data controllers and legal jurisdictions dictate the directive. While Waze operates under Israeli legal jurisdiction, Google Maps is incorporated in the United States and governed by US federal and state laws. The policy decision centres on national information sovereignty, mitigating potential automated data harvesting of public servants' regular transit movements, and preventing sensitive geolocation analytics from passing into foreign legal territories unrecognised by the Malaysian administration.

Key Facts

Why Is Google Maps Exempt While Waze Is Barred?

Google Maps remains permitted for Malaysian civil servants because its data controller is registered in the United States and subject to US law, whereas Waze is incorporated under Israeli law. MKN determined that this jurisdictional disparity dictates foreign legal recourse, data governance policies, and the handling of official government movement telemetry across cross-border digital frameworks.

According to MKN, the prohibition imposed on Waze hinges on two primary operational issues: the application’s capacity to capture detailed user movement, continuous trajectories, and device-level telemetry that reveal routine travel habits when aggregated, and terms of service that subject civil disputes exclusively to Tel Aviv courts. The council raised specific flags over administrative personnel routing data being stored or processed in a jurisdiction Malaysia does not formally recognise, cautioning that telemetry could be targeted for AI-driven behavioural profiling.

“completely false”

Waze spokesperson, via The Associated Press

Waze refuted the state allegations to The Associated Press, arguing that accusations of collecting sensitive public sector telemetry or undermining consumer privacy standards are inaccurate, whilst declining to address queries on its Israeli roots.

Legal entity jurisdiction and terms of service dictate app compliance for Malaysian state bodies rather than corporate parentage.

Will Additional Foreign Digital Services Be Scrutinised?

The Malaysian government has tasked the National Cyber Security Agency (NACSA) with reviewing foreign-controlled software applications, focusing specifically on enterprise platforms, mobile suites, and web services bound to Israeli jurisdiction. MKN confirmed that oversight agencies will intervene with further administrative restrictions if peer products show comparable telemetry harvesting risks or non-aligned regulatory frameworks.

MKN stated that the current restrictions employ a phased rollout strategy, balancing state security protocols against civil servants' practical utility and day-to-day digital discretion. NACSA's technical audit is set to examine underlying cloud infrastructure, legal controller terms, and data export agreements for business and utility services deployed across official administrative devices. The council reiterated that intervention policies remain tethered to verified sovereign data risk rather than software developer branding.

The National Cyber Security Agency is actively auditing other commercial applications subject to Israeli law to evaluate civil service deployment risks.

What It Means for Malaysian Buyers

For Malaysian civil servants and enterprise fleets operating across government networks, Google Maps provides an officially compliant navigation alternative for public duties that carries no administrative penalties. Everyday domestic road users on consumer mobile networks remain unaffected by the directive, retaining full consumer access to both Waze and Google Maps on personal hardware without statutory disruption.

Local government agencies and fleet operators that previously standardised their navigational logs on Waze must now transition administrative personnel to approved navigation platforms under US or local legal domains. General motorists who do not handle public duties or administrative communications face no legal requirement to modify their current smartphone application configurations.

The MKN navigation restrictions apply strictly to civil servants executing official administrative tasks, leaving general civilian usage across Malaysia unchanged.

Common Questions

Does the Waze ban apply to the general public in Malaysia?

No, the restriction announced by MKN is limited to Malaysian civil servants conducting official government duties. Everyday domestic road users and private drivers can freely continue using Waze on consumer smartphones and vehicles without encountering regulatory restrictions or operational bans.

Why are Google Maps and Waze treated differently despite shared ownership?

While Alphabet owns both mapping services, Google Maps operates under United States law as an American entity. Waze retains a data controller incorporated in Israel, with terms of use stipulating that legal disputes fall under the exclusive jurisdiction of Tel Aviv courts.

What specific data points raised national security concerns?

MKN raised concerns regarding automated logging of real-time locations, commute routes, travel schedules, and device identifiers. The council noted that aggregating these metrics enables artificial intelligence models to systematically track, map, and expose government personnel movements and travel patterns.

Sources and Methodology

Data compiled directly from official statements published by the National Security Council (MKN), technical updates via the National Cyber Security Agency (NACSA), and secondary reporting by Lowyat.NET and The Associated Press on 23 October 2026. No foreign currency exchange calculations, speculative price estimates, or unconfirmed hardware specifications were applied.