Tribal leaders are reframing data governance as a sovereign obligation, treating digital information the same way they protect physical land. At the 2026 Center for Indian Country Development Data Summit in June, Indigenous leaders outlined how tribes can establish legal frameworks to control their data, generate revenue, and participate in the AI economy without surrendering tribal sovereignty.

Why Are Tribes Treating Data as Digital Territory?

The comparison is deliberate and powerful. Traci Morris, Executive Director of the American Indian Policy Institute and a scholar on tribal digital sovereignty, explained the stakes clearly: "Getting tribal data sovereignty right is as important as protecting the land. It's the digital age, and data is our territory. It carries our people, our languages, our future generations".

This framing shifts how tribes think about data protection from a compliance issue to a matter of cultural duty. Morris credited Chickasaw Nation Data Stewardship Director Mari Hulbutta with introducing the concept of viewing "data as kin," which fundamentally changes governance priorities. "Talking about data as kin changes the way we think about data governance from a matter of compliance to a matter of duty," Morris noted.

The urgency is real. Michael Running Wolf, co-founder of First Languages AI Reality (FLAIR) and a member of the Lakota and Cheyenne nations, compared the current moment to the early internet era. "We're in a moment now where it's like 1998, and the Internet's about to be big," Running Wolf said at the summit. "We can invest ourselves in AI, or we can let AI bypass Indian Country and not participate in the new economy. We have an opportunity here to be early".

What Legal Infrastructure Do Tribes Need to Build?

Establishing tribal data sovereignty requires more than good intentions. Experts have identified specific legal and organizational structures that tribes should prioritize as they develop their digital governance frameworks.

• Tribal Codes and Regulations: Morris recommended tribes start with civil and regulatory authority over health and financial data, as these are the easiest to defend and most frequently misused, making them high-impact priorities for protection.
• Contracts and Agreements: Tribes need clear contractual language governing how vendors, partners, and external entities can access and use tribal data, with explicit restrictions on data sharing or transfer.
• Infrastructure Arrangements and Business Registration: Tribes must establish systems for managing broadband infrastructure, digital assets, and business registration to ensure data stays within tribal control and generates revenue for tribal economies.

Morris emphasized that these protections must be codified in law, not left to individual leadership priorities. "Don't leave digital governance values and guidelines up to a leader's priorities, because our leadership changes," she stated. "We've got to translate community values into ordinances, contracts, and land use agreements and take care that those digital governance tenets survive transition".

Morris

How to Build a Tribal Data Governance Workforce

Legal frameworks alone are insufficient without people trained to implement and enforce them. Tribal governments need to create new roles and invest in workforce development to manage the digital economy responsibly.

• Data Governance Officers: Dedicated positions to oversee tribal data policies, ensure compliance with tribal law, and coordinate data use across tribal departments and enterprises.
• Cybersecurity Specialists: Technical experts to protect tribal data infrastructure from breaches, unauthorized access, and external threats, particularly as tribes digitize sensitive health and financial records.
• AI Ethics Reviewers: Professionals trained to evaluate AI systems before tribes adopt them, assessing risks to tribal citizens and ensuring alignment with tribal values and sovereignty.
• Digital Rights Advocates: Advocates to represent tribal interests in negotiations with technology vendors and ensure tribal citizens understand how their data is being used.

These positions must be grounded in tribal law and culture, not simply imported from corporate models. Even tribal leaders at the highest levels need basic literacy about AI risks and benefits. Eric Ramos, senior vice president of Tribal First and a member of the Blue Lake Rancheria Tribe, warned that tribal leadership often doesn't understand what software systems are actually doing with tribal data.

"There's a tremendous amount of savings and efficiency that can come with adopting AI in tribal operations, but the biggest risk is, does tribal leadership understand what that software is doing?" said Ramos.

Eric Ramos, Senior Vice President, Tribal First

Ramos illustrated the risk with a concrete example: a tribal gaming operation renewing a software license for its customer relationship management database. On the surface, this seems like a technical decision. But if that database contains sensitive tribal citizen data like driver's license numbers, W-2 information, or Social Security numbers, and if the software upgrade includes changes allowing the vendor to access that data, the tribe could inadvertently grant an AI system access to all that sensitive information.

How Does the Moneris Case Illustrate the Risks?

The stakes of tribal data sovereignty became even clearer with a recent development in Canada. The Royal Bank of Canada and Bank of Montreal announced they are selling Moneris Solutions Corp., a payment processor handling roughly one in three payment transactions across Canada, to San Francisco-based private equity firm Francisco Partners for $2 billion.

The deal raises alarm bells about what happens when critical data infrastructure falls under foreign control. Moneris processes more than 5 billion transactions annually and services over 325,000 points of commerce across Canada. Sharon Polsky, president of the Privacy and Access Council of Canada, warned that Canadians should be concerned because their purchasing data will now be accessible to foreign governments and law enforcement agencies.

"Canadians should be concerned because this is their information. We're now going to have what has been a Canadian data-processing company that has access to everybody's purchasing habits available to other governments," said Polsky.

Sharon Polsky, President, Privacy and Access Council of Canada

Polsky raised a troubling scenario: U.S. border agents could potentially check an individual's transaction history before allowing them to enter the country. "Will you be stopped at the border because your purchase records indicate that you bought something with THC?" she asked, noting that such scenarios are now more possible than ever before.

The Moneris case demonstrates exactly why tribes must treat data as digital land requiring sovereign protection. If a major payment processor can be sold to foreign investors, giving those investors access to millions of citizens' purchasing data, tribal data faces similar risks unless tribes establish their own governance frameworks and retain control over their digital assets.

Canadian Senator Colin Deacon echoed these concerns, noting that data could be shared with U.S. government agencies under legal compulsion. "[Data] under force and under request from the U.S. government could be then shared on an individual basis," Deacon stated.

What Economic Benefits Can Tribal Data Governance Create?

Beyond protection, tribal data governance creates economic opportunities. Speakers at the data summit described using economic data to restore land, diversify tribal revenue streams, and finance capital projects. By controlling their own data infrastructure and establishing clear governance rules, tribes can monetize their data assets, attract technology investment, and build digital economies that serve tribal citizens rather than external corporations.

The broader context matters too. Morris noted that more than 36 states have pending legislation related to AI governance, meaning tribes are not behind the curve. "We're not behind the eight ball. Everybody's in the same boat right now,cities, towns, counties, nations, the world. We're all trying to figure out how to govern AI and this digital space, and other governments can learn from what tribes do," Morris explained.

Morris

Tribal approaches to data governance, grounded in concepts like viewing data as kin and treating it as sacred territory, may offer lessons for all governments struggling to balance innovation with protection of citizen privacy and sovereignty.