Mjoli, PEloff, JHPDlamini, Thandokuhle M2025-07-222025-07-222025-05978-1-905824-75-5DOI: 10.23919/IST-Africa67297.2025.11060483http://hdl.handle.net/10204/14303This paper proposes a Shared Responsibility Model to address South Africa’s data localization requirements in the financial sector, illustrated through a case study of DigiBankSA. With the POPIA and the National Cloud and Data Policy mandating data residency, this model divides security and compliance roles between cloud providers (AWS, Google Cloud, Microsoft Azure) and financial institutions to ensure adherence while unlocking cloud capabilities. DigiBankSA benefits from storing sensitive customer data within South African borders while utilizing global cloud services for advanced analytics, scalability, and cost efficiency. Additionally, the model aligns with the African Union’s Malabo Convention, promoting secure cross-border data flows across African nations, fostering regional cooperation, and enhancing DigiBankSA’s data protection strategies. This shared model provides a balanced approach to data localization and cloud utility, positioning DigiBankSA for growth while maintaining regulatory compliance. Future work will refine implementation guidelines and explore secure, regulated, cross-border data flow strategies.FulltextenCloud ComputingData localisationDigiBankSANational Cloud and Data PolicyPOPIAConference Presentationn/a