KUALA LUMPUR: The decision to ban civil servants from using the Waze navigation app is a proactive measure to protect their privacy and data, say experts.
However, they say any substitute app must also be held to the same standards and guarantee data security.
“The government decision limits the exposure of civil servants’ movement data, particularly those with access to classified information or involved in critical missions at undisclosed locations,” said cybersecurity expert Fong Choong Fook.
Fong said the same standards for data protection should apply to homegrown navigation apps like TuJu and Pintaz.
“They must also undergo rigorous security assessments to ensure the data they store and manage is adequately protected.”
Malaysian Cyber Consumer Association (MCCA) president Siraj Jalil praised the ban, saying he had previously urged the government to review the use of Waze back in October.
He said Malaysia’s non-recognition of Israel could complicate efforts by Malaysian users should they seek legal recourse over how their data is processed.
A PAS MP, however, wanted the government to explain why the restriction was only for civil servants.
Afnan Hamimi Taib Azamudden asked why the restriction was not extended to the wider public if the app indeed posed a security threat.
“If Waze is dangerous, then do not allow it in Malaysia. Everyone should be prohibited from using it,” the Alor Setar MP said during the Budget 2027 debate in the Dewan Rakyat yesterday.
Dr Manjeevan Singh Seera, an associate professor at the Monash University Malaysia School of Business, said that there was a need to separate political concerns from cybersecurity risks.
“Waze itself maintains navigation and travel history, which users can access through the app,” he said, adding that if such information were to fall into the wrong hands, it could potentially be used to track individuals or identify their daily routines.
“However, having the ability to track someone doesn’t necessarily mean the information is being misused. That’s an important distinction,” he added.
Manjeevan said there was no need for Malaysians to panic or stop using Waze.
“The risks are different for civil servants, particularly those who may travel to sensitive government locations,” he added.
He advised users to be cautious about the information they share when signing up for apps, including email addresses, phone numbers and location permissions.
“It’s also good practice to review and delete unnecessary location history in all apps,” he added.
The government has explained that security and data protection concerns had prompted the move.
It also said the ban applies to civil servants only when carrying out their official duties.
However, civil servants are encouraged to uninstall the application from their devices.
In an FAQ on the matter, the National Cyber Security Agency (Nacsa) said Waze collects data such as users’ location data, movements, journeys and device information.
Such data, when collected repeatedly and analysed collectively, could reveal users’ movement patterns and activities, Nacsa said.
“While there is no evidence that Waze analyses users’ data in this way, the possibility that the information could be used or exposed to such analysis remains a risk,” Nacsa said.
The agency added that the app is developed by Waze Mobile Ltd, a company registered and incorporated according to the laws of Israel.
