The Localization-Dependency Paradox: How Data Localization Mandates Hollow Out Digital Sovereignty in Southeast Asia
States across the developing world enact data localization mandates to assert digital sovereignty, yet effective governance remains elusive. This paper identifies a structural explanation: localization law governs the physical layer, particularly data centers, but not the platform ecosystem through which data is processed and governed. We term this the Localization-Dependency Paradox: states secure jurisdiction over physical infrastructure while ceding effective governance over the platform layer above it, thereby embedding hyperscaler dependency rather than resolving it. Drawing on facility-level data from seven US and Chinese hyperscalers across six Southeast Asian countries between 2010 and 2026, the paper shows that the paradox operates through divergent network topologies. US hyperscalers construct Singapore-centered hierarchies that concentrate regional governance in a permissive hub, while Chinese hyperscalers build more distributed networks with localized processing nodes. Two mechanisms generate this divergence: home-state regulatory frameworks create asymmetric entry incentives, and hyperscalers satisfy physical-layer mandates through zero-equity colocation while retaining platform governance contractually. The 2024 Vietnam submarine cable disruption, treated as an external shock, further shows that topology shapes resilience: US, but not Chinese hyperscalers recalibrated. The Localization-Dependency Paradox reflects an emerging digital state of nature in which sovereignty mandates govern infrastructure while effective governance shifts to platform ecosystems.