Digital Self-Determination and Legal Foundations

The legal foundations for digital self-determination are grounded in both international human rights frameworks and domestic tribal law. Together, they establish that Indigenous peoples must retain authority over how their data, knowledge systems, and digital estates are collected, used, and governed. This is not an emerging aspiration. It is a principle with substantial legal backing that tribes should be operating from today.

International Frameworks: UNDRIP and the Right to Self-Determination

The United Nations Permanent Forum on Indigenous Issues (UNPFII) has played the leading role in advancing the concept of digital self-determination. The United Nations Declaration on the Rights of Indigenous Peoples (UNDRIP) provides the most comprehensive international articulation of these rights. Article 3 recognizes that Indigenous peoples “have a right to self-determination” and may “freely pursue their economic, social and cultural development.” Article 4 further recognizes Indigenous rights to autonomy and self-government in matters relating to their internal affairs.¹ These provisions directly support the authority of Indigenous communities to retain control over digital infrastructures, AI systems, and the governance of data derived from their peoples, territories, and culture.

Article 31 has become particularly influential in discussions of AI and Indigenous data sovereignty because it expressly recognizes Indigenous peoples’ rights to “maintain, control, protect and develop” their cultural heritage, traditional knowledge, sciences, technologies, and intellectual property.¹ International organizations increasingly interpret this language as extending to digital information, machine-learning datasets, biometric data, cultural archives, and AI systems trained on Indigenous knowledge and languages.

The United Nations Permanent Forum on Indigenous Issues has applied these principles to warn that without meaningful Indigenous participation in AI design and governance, AI risks replicating extractive practices historically imposed on Indigenous lands and resources.² The Forum frames digital self-determination not merely as participation, but as co-governance and control.

Tribal Law as the Governing Framework

Because there are currently few, if any, federal or state legal systems that specify regulations related to AI and Indigenous communities, tribal law is the most appropriate and legally grounded framework for governing how tribal information is used in cloud computing and through AI.

This is not a gap to be filled by outside regulation, it is sovereignty prerogative. Tribal legal systems are uniquely situated to account for the collective nature of Indigenous identity and knowledge systems. Western legal systems generally do not classify data as collective knowledge in the way that Indigenous communities do. Cultural information, oral histories, ecological practices, governmental records, and language are understood in Indian Country as interconnected components of communal identity and intergenerational responsibility. Tribal legal systems are therefore better equipped to determine appropriate standards for consent, access, stewardship, and cultural sensitivity in relation to AI technologies.

McGirt and the Reassertion of Sovereignty

Evolving federal Indian law strengthens the case for tribal governance in the digital domain. The U.S. Supreme Court’s decision in McGirt v. Oklahoma reaffirmed a foundational principle: tribal sovereignty and treaty rights remain legally operative unless U.S. Congress unmistakably says otherwise.³ The ruling confirmed that much of eastern Oklahoma remained reservation land because Congress had never clearly disestablished the Muscogee (Creek) Nation’s reservation and therefore the State of Oklahoma lacks jurisdiction over Indians for major crimes within Creek reservation boundaries.

In the cloud computing and AI context, McGirt strengthens the argument that tribes possess authority to regulate technological activity occurring on tribal lands or involving tribal citizens and resources. While federal preemption issues will continue to shape the contours of regulation, the decision demonstrates that tribal authority over emerging technology is an extension of longstanding principles of sovereignty, treaty rights, and self-determination into the digital age.

International Momentum

Other international bodies have followed this trajectory. The United Nations General Assembly, the Organisation for Economic Co-operation and Development (OECD), and the World Intellectual Property Organization (WIPO) have each advanced frameworks that recognize the need to protect Indigenous digital self-determination.⁴ ⁵ ⁶ These complement the domestic legal foundations and provide tribes with additional tools for engaging in global conversations about technology governance.

Comparative Frameworks

Canada has produced the Ownership, Control, Access, and Possession (OCAP) framework as one of the most influential Indigenous data governance models in the world, and understanding its strengths, gaps, and applicability is essential for adapting its lessons. For a detailed analysis of the OCAP principles, developed by the First Nations Information Governance Centre in Canada and how they compare to the U.S. tribal context, see the dedicated OCAP Analysis page.

Legal Foundations: UNDRIP Provisions, UNPFII, and McGirt Analysis.

Currently, the legal foundations of digital self-determination in relation to cloud computing and AI stem from United Nations bodies. These bodies identify a framework grounded in human rights, data governance, and technological participation. Digital self-determination reflects the principle that Indigenous peoples must retain authority over how their data, knowledge systems, and digital identities are collected, used, and governed.

Specifically, the United Nations Permanent Forum on Indigenous Issues has played the leading role in advancing this concept.² Based on the United Nations Declaration on the Rights of Indigenous Peoples (UNDRIP), the Forum has applied the emerging concepts of digital self-determination and Indigenous data sovereignty in the context of AI and data governance. The Forum has repeatedly emphasized that Indigenous peoples must be meaningfully included in the design, deployment, and governance of technology and AI systems. Its reports warn that without such inclusion, AI risks replicating extractive practices historically imposed on Indigenous lands and resources. The Forum, therefore, frames digital self-determination not merely as participation, but as a co-governance and control imperative.

Several provisions of UNDRIP provide a foundation for this framework. Article 3 recognizes that Indigenous peoples “have a right to self-determination” and may “freely pursue their economic, social and cultural development.” Article 4 further recognizes Indigenous rights to autonomy and self-government in matters relating to their internal affairs.¹ These provisions provide a justification for Indigenous communities to retain authority over digital infrastructures, AI systems, and the governance of data derived from their peoples, territories, and culture.

Article 31 has become particularly influential in discussions surrounding AI and Indigenous data sovereignty because it expressly recognizes Indigenous peoples’ rights to “maintain, control, protect and develop” their cultural heritage, traditional knowledge, sciences, technologies, and intellectual property. Scholars and international organizations increasingly interpret this language as extending to the digital estate including, machine-learning datasets, biometric data, cultural archives, and AI systems trained on Indigenous knowledge and languages.

Similarly, the United Nations Department of Economic and Social Affairs (DESA) has highlighted the structural risk posed by AI technologies, particularly their potential to exploit Indigenous knowledge without consent or to reinforce systemic inequalities. DESA’s work underscores that Indigenous data is deeply tied to identity and survival, and therefore requires protections analogous to those applied to land and natural resources. This reinforces the idea that digital systems must be governed according to Indigenous laws, values, and priorities.

Because there are currently few, if any, federal or state legal systems that specify regulations related to AI and Indigenous communities, tribal law should govern how tribal information is used through AI. Unlike federal or state legal systems, tribal law is uniquely situated to account for the collective nature of Indigenous identity and knowledge systems. Western legal systems do not classify data as collective knowledge like Indigenous communities do. Indigenous communities view cultural information, oral histories, ecological practices, governmental data, and language as interconnected components of communal identity and intergenerational responsibility. Tribal legal systems, therefore, are better equipped to determine appropriate standards regarding consent, access, stewardship, and cultural sensitivity in relation to AI technologies.

Stemming from the landmark Supreme Court decision in McGirt v. Oklahoma, the ruling related to the definition of sovereignty.³ Because of its holding, much of eastern Oklahoma remains reservation land, as Congress had never clearly disestablished the Muscogee (Creek) Nation’s reservation. The decision reaffirmed a foundational principle of federal Indian law: tribal sovereignty and treaty rights remain legally operative unless Congress unmistakably says otherwise. In the technology and AI context, McGirt strengthens the argument that tribes possess authority to regulate technological activity occurring on tribal lands or involving tribal citizens and resources.

Ultimately, while federal preemption issues will continue to shape the contours of technology regulation, McGirt v. Oklahoma demonstrates that as artificial intelligence becomes increasingly intertwined with Indigenous knowledge systems, cultural preservation, and territorial governance, tribal law provides the most appropriate and legally grounded avenue for determining how Indigenous information should be governed. Recognizing tribal authority in this way is not simply a technological policy choice. It is an extension of longstanding principles of sovereignty, treaty rights, and self-determination into the digital age.

References

United Nations Declaration on the Rights of Indigenous Peoples (UNDRIP), Articles 3, 4, and 31. https://social.desa.un.org/issues/indigenous-peoples/united-nations-declaration-on-the-rights-of-indigenous-peoples ↩ ↩² ↩³
United Nations Permanent Forum on Indigenous Issues. https://www.un.org/es/node/233085; see also UNPFII Report E/2025/43. https://docs.un.org/en/E/2025/43 ↩ ↩²
McGirt v. Oklahoma, 591 U.S. ___ (2020). https://supreme.justia.com/cases/federal/us/591/18-9526/ ↩ ↩²
United Nations General Assembly, Global Digital Compact on AI. https://www.un.org/global-digital-compact/en/ai ↩
Organisation for Economic Co-operation and Development (OECD), Artificial Intelligence policy. https://www.oecd.org/en/topics/policy-issues/artificial-intelligence.html ↩
World Intellectual Property Organization (WIPO), Treaty on IP, Genetic Resources and Associated Traditional Knowledge. https://www.wipo.int/en/web/traditional-knowledge/wipo-treaty-on-ip-gr-and-associated-tk ↩