The relationship of First Nations to their cultural knowledge, data and information: a community owns information about it collectively, as it owns its lands.
Established record, cited
The record / data sovereignty
Data is not exhaust. It is estate.
For peoples whose songs, seeds, genomes, place-names and stories were collected for centuries without consent, "data" is not a by-product to be scraped. It is ancestral estate, held collectively, governed by law older than any database. Indigenous data sovereignty is the movement that made this legible to the systems that had been ignoring it, and it arrived just in time for the age of AI training runs.
Last research run
2026-07-10
CARE quoted against GIDA's publication; OCAP® against FNIGC's materials; the Maiam nayri Wingara principles against the collective's published text. These bodies keep evolving their work, theirs is the living version.
The claim
Who owns the data about a people? The people do.
Indigenous data sovereignty asserts that data from and about Indigenous peoples, their lands, waters and knowledges is subject to the rights and governance of those peoples, an extension of inherent sovereignty and of UNDRIP Article 31 into the digital world. It is asserted by nations and networks across every region, each in their own legal and cultural frame.
The movement's genius is that it did not wait for permission. Collectives wrote principles, built labels, trained institutions and set terms, and the research and data world has been catching up ever since.
Global Indigenous Data Alliance, published 2019
The CARE Principles for Indigenous Data Governance.
Where the FAIR data principles ask whether data is findable, accessible, interoperable and reusable, CARE asks the questions FAIR forgot: who benefits, who decides, who answers for it. The four principles, as published:
Collective Benefit. “Data ecosystems shall be designed and function in ways that enable Indigenous Peoples to derive benefit from the data.”
Authority to Control. “Indigenous Peoples’ rights and interests in Indigenous data must be recognised and their authority to control such data be empowered.”
Responsibility. “Those working with Indigenous data have a responsibility to share how those data are used to support Indigenous Peoples’ self-determination and collective benefit.”
Ethics. “Indigenous Peoples’ rights and wellbeing should be the primary concern at all stages of the data life cycle and across the data ecosystem.”
CARE is designed to be applied alongside FAIR, not instead of it, "Be FAIR and CARE" is the movement's own phrasing.
First Nations Information Governance Centre, Canada
The First Nations principles of OCAP®.
OCAP® stands for ownership, control, access and possession. In FNIGC's words, the principles “establish how First Nations' data and information will be collected, protected, used, or shared,” and serve as a tool on the path to First Nations data sovereignty.
First Nations control how data about them is collected, stored, interpreted, used and shared, across the whole life cycle, not just at the collection moment.
First Nations must have access to information about themselves and their communities, wherever it is held, and can decide who else gets access.
Stewardship in the physical sense: holding the data is the mechanism by which ownership is asserted and protected. Servers matter. (This is where the compute room begins.)
OCAP® is a registered trademark of the First Nations Information Governance Centre (FNIGC), a deliberate act of data governance in itself: the principles cannot be repackaged and sold back to the peoples who wrote them.
Maiam nayri Wingara (Australia): Indigenous Data Sovereignty Summit, 2018
The Maiam nayri Wingara principles.
The Maiam nayri Wingara Indigenous Data Sovereignty Collective is the peak body of Aboriginal and Torres Strait Islander experts defining data rights in Australia. From the collective's published principles, Aboriginal and Torres Strait Islander peoples have the right to:
“Exercise control of the data ecosystem including creation, development, stewardship, analysis, dissemination and infrastructure.”
Data that is “contextual and disaggregated (available and accessible at individual, community and First Nations levels).”
Data that is “relevant and empowers sustainable self-determination and effective self-governance.”
“Data structures that are accountable to Indigenous peoples and First Nations.”
Data that is “protective and respects our individual and collective interests.”
A network of networks
Every region is writing its own version.
The Māori Data Sovereignty Network, formed in the mid-2010s, advocates that data for, from and about Māori is a living treasure (taonga) and should be subject to Māori governance.
The US Indigenous Data Sovereignty Network links tribal nations, researchers and policy-makers asserting tribal governance over tribal data, 574 federally recognised nations, each its own data authority.
The Global Indigenous Data Alliance connects these networks across regions, and stewards CARE as a shared floor while each people builds its own house on it.
This page lists networks, not nations, and even so it is incomplete by design. If your people's data governance body should be visible here on its own terms, the onboarding room explains how, and how to say no.
Local Contexts, TK & BC Labels
The labels that let communities set the terms.
Local Contexts built something quietly radical: Traditional Knowledge (TK) and Biocultural (BC) Labels that communities themselves customise and attach to their materials in archives, museums, databases and research collections. The label is not a licence granted by an institution, it is the community's own voice travelling with the material, stating provenance, protocols and permissions in the community's terms.
Institutions apply matching Notices that flag openness to community authority before a community has engaged. The model matters to this site for one reason above the rest: it is self-onboarding. No community waits for an institution's permission to define its terms. This lab borrows that pattern wholesale, nations add themselves here, define their own entries, and can withdraw them at will.
P4A proposal, react, revise, refuse
Where the record meets the machine age
Biopiracy had a paper trail. Data piracy has a training run.
Here the room crosses from record into proposal, and the border is marked. Our reading: everything the instruments above protect, knowledge, songs, seeds, genomes, designs, is now trainable. A model can ingest a people's language archive without consent and speak a version of it back at scale. The consent instruments exist; the enforcement surface has moved into datasets, weights and inference endpoints.
The pattern we offer in the proposal rooms is one possible response: keep possession literal. Community-held models, on community-held hardware, on Country, offline-first, so that Authority to Control has a place to physically live. That argument continues in the compute room, flagged purple the whole way.
Sources and honesty
The collectives are the source of truth.
Every principle quoted here belongs to the body that authored it, and their published versions supersede this page the moment they update. If any steward of these principles wants wording here amended or removed, that happens without argument.
quotes verbatimstewards hold the living textremoval on requestnot legal adviceverify at source