Data Security in Mozambique in Digital Transformation and Cloud Computing: A Strategic Approach

Martin Cumbane"

Digital transformation in Mozambique has gained significant momentum in recent years, driven by the expansion of the internet, the adoption of emerging technologies and the growing reliance on digital services. However, as the country moves towards a more digitalised economy, data security and information governance have become critical issues that require immediate and strategic attention. Cloud computing, while offering numerous advantages in terms of scalability, efficiency and cost reduction, also presents significant challenges in terms of data protection, especially in a context where cybersecurity legislation and infrastructure are still developing.

Mozambique, like many developing countries, faces unique challenges in ensuring data security. The lack of a robust cybersecurity culture, coupled with a shortage of skilled professionals in the field, makes the country vulnerable to cyberattacks, fraud and data breaches. Furthermore, the rapid adoption of electronic transactions, driven by financial inclusion and the popularity of services such as M-Pesa and E-mola, exposes citizens and businesses to significant risks. The lack of clear and comprehensive data protection regulations further exacerbates this situation, leaving gaps that can be exploited by malicious actors.

In this context, the Government of Mozambique, through the Ministry of Communications and Digital Transformation, has promoted numerous political and legislative initiatives to ensure an environment conducive to digital transformation in the country. Since the approval of the IT Policy in 2000, several policy and regulatory instruments have followed, such as the E-Government Strategy, the Broadband Strategy, the Information Society Policy and its Implementation Strategy, and the Cybersecurity Policy and its Implementation Strategy. Digital governance is also reflected in the National Cybersecurity Policy and Strategy, which has 120 initiatives, including the establishment of a national mechanism for the promotion, sharing, cooperation and coordination in cybersecurity matters, based on the National Network of CSIRTs created in January 2008, which serves as a forum of excellence for the sharing of operational information and the implementation of the Mozambique Digital Certification System.
In the context of the strategy to advance towards e-Government, the following stand out: the Electronic Transactions Law (Law No. 3/2017), the e-Government Interoperability Framework (Decree No. 67/2017), the Policy for the Information Society (Resolution No. 17/2018), the Strategic Plan and the Operational Plan for the Information Society (Resolution No. 52/2019), and the establishment of the Government of Mozambique Portal, which favored applications for electronic scheduling of related public services.

Cloud computing is emerging as a powerful tool, but it requires a strategic approach to ensure data security. Migrating to the cloud offers opportunities to modernize the country’s technology infrastructure, but it also requires implementing rigorous data governance policies. This includes defining encryption standards, establishing audit mechanisms, and ensuring that cloud service providers comply with international security best practices. In addition, it is essential that the government and the private sector work together to develop a national cybersecurity strategy that includes training professionals, raising awareness among citizens, and creating an enabling regulatory environment.

Cloud data governance is another key pillar for security in the digital age. In Mozambique, it is urgent to adopt a data protection law that is aligned with international standards, such as the European Union’s General Data Protection Regulation (GDPR). This legislation should guarantee citizens’ privacy, establish clear guidelines for data collection, storage and processing, and impose strict penalties for violations. Furthermore, the creation of a national data protection authority responsible for overseeing the implementation of these standards is a crucial step towards strengthening citizens’ and businesses’ trust in digital services.

Electronic transactions, in turn, represent one of the pillars of digital transformation in Mozambique. However, the security of these transactions depends directly on the robustness of cybersecurity infrastructures and the adoption of safe practices by users. The implementation of technologies such as two-factor authentication, end-to-end encryption and real-time monitoring of transactions can significantly reduce the risks of fraud and data theft. In addition, it is essential that banks and other financial institutions invest in digital education, teaching customers how to protect their information and recognize potential threats.

According to Microsoft (2025), data sovereignty offers government customers complete control over their data. This control includes data residency within regional boundaries and tools to ensure control over who has access to their data. Data sovereignty is of utmost importance to governments that aim to protect government data from security breaches and malicious activity, maintain the confidentiality of government data to protect privacy, and avoid negative impacts on business and finances. By investing in aphysical room, a building or facility that houses the IT infrastructure to build, run, and deliver applications and services.(Datacenter) a private and isolated location, can be a viable strategy for governments, since the data is kept entirely within the country's borders, in the state's data centers. This eliminates associated risks (cyber attacks, data leakshereo) international data transfer and ensures full compliance with national regulations.

Data security in Mozambique is a complex challenge, but also an opportunity to build a more resilient and inclusive digital economy. Cloud computing and electronic transactions are key elements of this transformation, but their adoption must be accompanied by a robust security and governance strategy. The government, the private sector and civil society have a crucial role to play in this process, working together to create a secure and trusted digital ecosystem. Only then will Mozambique be able to reap the rewards of digital transformation, ensuring that the benefits of technology are accessible to all, without compromising the privacy and security of citizens.

2025/12/3