KUALA LUMPUR, Malaysia — October 21, 2026 — Malaysia has intensified scrutiny of popular navigation application Waze, with Prime Minister Anwar Ibrahim warning that the Google-owned platform could pose risks to the security of citizens’ personal information and travel data because of its links to Israel.
What began as a public recommendation to consider a Malaysian alternative has developed into a more significant government action: a prohibition on Waze use among civil servants, according to Malaysian media reports citing an official circular dated October 20.
The development puts one of the world’s best-known traffic navigation services at the center of a growing debate over cybersecurity, national sovereignty and the potentially sensitive information collected whenever motorists use GPS applications.
Why Malaysia Is Targeting Waze
Anwar raised the concerns after chairing the third meeting of Malaysia’s National Cyber Security Committee on October 20.
According to the prime minister, officials examined potential security risks involving information about Malaysian citizens’ movements, particularly because Waze is subject to Israeli laws.
The government is concerned about possible exposure of sensitive information, including location and travel data, although the public statements reviewed did not establish that Waze had improperly transferred Malaysian users’ information to Israeli authorities.
Waze originated in Israel and was acquired by American technology giant Google in 2013.
Its Israeli origins have become politically sensitive in Malaysia, which does not maintain formal diplomatic relations with Israel.
Anwar encouraged the public to consider TuJu, a Malaysian navigation application developed for the Malaysian Highway Authority, as an alternative.
New Development: Malaysia Bars Civil Servants From Using Waze
The controversy took a significant turn on October 21 when Malaysian technology publication SoyaCincau and news outlet Malaysiakini reported that the government had prohibited civil servants from using Waze.
The outlets cited a circular dated October 20 and signed by Chief Secretary to the Government Shamsul Azri Abu Bakar.
According to those reports, the directive follows a decision taken during the National Cyber Security Committee meeting chaired by Anwar.
Government departments and agencies have been instructed to communicate the decision to their personnel, while Malaysia’s National Cyber Security Agency is responsible for coordinating implementation.
The reported prohibition applies to civil servants. The government’s separate recommendation that the general public consider TuJu should not be confused with a nationwide ban on private motorists using Waze.
That distinction matters because the restrictions on government personnel are considerably more concrete than Anwar’s broader advice to ordinary drivers.
Meet TuJu: Malaysia’s Homegrown Alternative
Malaysia is promoting TuJu as a domestic alternative to foreign navigation applications.
Developed by Prosignal Consortium for the Malaysian Highway Authority, the platform was launched in November 2025 and offers features intended to assist motorists using the country’s highway network.
Its reported capabilities include real-time traffic information, toll charges, access to highway camera information, rest-stop details and mechanisms for reporting road incidents or infrastructure problems.
But competing against an established navigation platform will not be easy.
Waze has built its appeal around community-generated traffic reports, road hazard notifications, alternative routes and constantly updated navigation information.
TuJu’s long-term prospects will depend not only on government support but also on its reliability, coverage, usability and ability to protect personal information.
An additional question concerns the technology powering the Malaysian application itself. Previous reporting indicated that TuJu uses Google mapping services, meaning the distinction between local ownership and complete technological independence deserves closer examination.
Why Location Data Has Become a National Security Issue
Navigation applications do more than tell drivers where to turn.
Depending on their features, permissions and settings, they can collect detailed location information, travel routes, timestamps, search activity and device-related information.
Waze’s published privacy policy acknowledges the collection of detailed location and route information and describes circumstances in which information may be shared with Google affiliates or disclosed in response to legal requirements.
Such information can help improve traffic navigation, but it also raises legitimate questions about how data is stored, protected and accessed.
For governments, concerns may be particularly sensitive where travel patterns could reveal information about official facilities, government personnel or other strategically important locations.
However, there is an important distinction between the ability of an application to collect location information and evidence that such information has been accessed or misused by a foreign government.
Malaysia’s concerns are a matter of public policy and risk assessment; they are not, by themselves, proof that Waze has carried out espionage.
Malaysia’s Wider Digital Security Push
The Waze controversy is part of a broader Malaysian government effort to strengthen national cybersecurity.
At the same October 20 meeting, officials discussed the implementation of the Cyber Security Act 2024, protection of critical national information infrastructure and the security of Malaysia’s MyDigital ID platform.
The government also examined threats involving autonomous artificial intelligence and preparations for post-quantum cryptography, which is intended to help protect information systems against potential future threats from powerful quantum computers.
Anwar emphasized the need to strengthen digital public services without compromising trust, security or national sovereignty.
Malaysia is reinforcing its identity infrastructure through MyKad, its physical national identification credential, and MyDigital ID for digital transactions.
Malaysia Is Not Alone in Questioning Waze
Malaysia’s concerns also come amid scrutiny of Waze elsewhere.
Channel News Asia reported that Iraq was planning to block the navigation platform by the end of December 2026, citing reporting from Al Jazeera about similar security concerns and the application’s Israeli origins.
The developments highlight how navigation technology can become entangled with geopolitical tensions and questions about the jurisdiction of international technology providers.
They also raise an important challenge for governments encouraging domestic alternatives: replacing a foreign application does not automatically eliminate privacy risks if the replacement continues to rely on international mapping infrastructure, cloud systems or third-party technologies.
The Bigger Test: Can Malaysia Protect Data Without Sacrificing Convenience?
Malaysia’s decision creates a practical test of whether national cybersecurity priorities can coexist with the everyday convenience motorists expect from navigation technology.
For civil servants, the immediate issue is compliance with the reported government directive.
For private motorists, the choice remains broader: whether to continue using Waze or consider an alternative recommended by Malaysian authorities.
For policymakers, the challenge goes deeper than which application appears on a smartphone.
The critical questions are where sensitive location information goes, which organizations control it, what safeguards protect it and whether those safeguards can be independently verified.
The bigger story is no longer simply Malaysia’s concerns about Waze. It is whether governments can regain meaningful control over citizens’ digital information in a world increasingly dependent on foreign-owned technology.
