MECM90002 Global Data Policy and Governance
The Complete Exam Bible · S1 2026MECM90002 Overview
- University of Melbourne
- S1 2026
- 8 chapters
- Arts and Humanities
Global Data Policy and Governance asks how the world actually governs a borderless internet — and why it keeps failing.
- Assessed by Argumentative essay (A1) 50% · Oral presentation / policymaker pitch (A2) 25% · Written case study (A3) 25% + 1 more — Attendance hurdle is a hurdle
- Key terms The fluid data ecology, Data / digital sovereignty, Jurisdiction, The Brussels effect
- How to prepare Treat the three tasks as one pipeline, not three islands: the reading you do for the essay (A1) seeds the pitch (A2)…
- Most asked What is MECM90002 about?
How MECM90002 is assessed
| Component | Weight | Format |
|---|---|---|
| Argumentative essay (A1) | 50% | 2500 words · pick one of three set questions · ~20 references — the largest single block of marks |
| Oral presentation / policymaker pitch (A2) | 25% | 3 minutes / 3 slides · pitch one intervention — it directly feeds the case study |
| Written case study (A3) | 25% | 1500 words · develop the A2 intervention into one bounded, in-depth case |
| Attendance hurdle · hurdle | Hurdle | Minimum 80% of tutorials/seminars, monitored — clear it or you cannot pass; confirm the exact rule in your subject guide |
What MECM90002 covers
Eight regions and debates → one argument-ready map. Each links to its free chapter guide.
Key Concepts and Debates
Datafication · the fluid data ecology · sovereignty vs jurisdiction · data colonialismThis is the toolkit chapter, and the highest-leverage one in the subject: roughly eighteen ideas that turn “the internet is hard to regulate” into an argument.
- 1.1 Datafication — life turned into machine-readable data
- 1.2 The 'fluid' data ecology — the signature concept
- 1.3 Governance vs government
- 1.4–1.5 Sovereignty (classical) and data/digital sovereignty (its four sub-types)
- 1.6 Jurisdiction, extraterritoriality, transborder flows, localisation, the splinternet
- 1.7–1.9 Data monopolies/gatekeepers · public vs private power · the public interest
Governance Models
Rights vs market vs state-control · the self / co / state regulation ladder · national vs globalIf the toolkit gives you the vocabulary, this chapter gives you the analytical engine.
- The master grid: rights-based vs market-based vs state-control
- Why real regimes are hybrids, not pure types
- The regulation ladder: self- vs co- vs state-regulation
- The standing critique of each rung
- National vs global / multi-stakeholder governance
- Volkmer's 'national lens' bind and the 'legal arms race'
The European Union Approach
The rights-based model · the data subject · GDPR Arts 12–23 · the Brussels effect · DSA/DMA/AI ActThe EU anchors one end of the course’s regulatory spectrum: a rights-based, citizen-centred model in which protecting the individual is the starting point, not an afterthought to the market.
- The EU as 'Regulatory Superpower' and the citizen-AND-consumer framing
- Three 'Europes' and how an EU law is made
- Rights of the data subject — GDPR Chapter 3, Arts 12–23
- Controller / processor / DPO and 'accountability'
- The Snowden hinge — why the EU went this way
- The expanding rulebook: DSA, DMA (gatekeepers), the EU AI Act
The US, UK and Australia
Free-market self-regulation · the UK duty of care · Australian selective interventionismIf the EU writes the citizen’s rights into binding law, the Anglosphere sits at the other end of the spectrum — but not at a single point.
- USA — free-market self-regulation, Lockean liberalism, the VC engine
- Antitrust (Sherman/Clayton/FTC), the FTC/FCC, and 'monopoly power'
- Net neutrality — the flip-flop that maps the politics
- Free speech, Section 230, and the cases (Matal v. Tam)
- UK — the 'duty of care' model and the 'platforms as censors' tension
- Australia — selective interventionism (Online Safety Act, Bargaining Code, under-16 ban)
African Perspectives
Development communication vs leap-frogging · the six challenges · Kenya / Rwanda / UgandaAfrica is the first of three Global-South regions the subject uses to pressure-test the regulatory spectrum running from the EU’s rights-based superpower to the US/Australia market models.
- Between two paradigms — development communication vs leap-frogging
- The twin narrative — challenges and opportunities in parallel
- The six challenges (a ready-made essay checklist)
- Data labour as the 'second face of double colonisation'
- The AU Digital Transformation Strategy (2020–2030)
- Three contrasting cases — Kenya vs Rwanda vs Uganda
Asian Perspectives
No GDPR-equivalent · mis/disinformation · China / India / Pakistan / Indonesia · ASEAN soft lawAsia is the guest-lectured region (Talal Raza, Week 9), and the framing is blunt: there is no single model and no GDPR-equivalent.
- No single model, no GDPR-equivalent — the structural fact
- The disinformation typology — mis-, dis-, mal-information
- Three cross-cutting themes (divide, AI ambition, digital authoritarianism)
- Four case countries — China, India, Pakistan, Indonesia
- From cyber-sovereignty to 'buzzer' democracy
- The four-intervention ladder (moderation → fact-check → literacy → regulation)
Latin American Perspectives
Digital corporate sovereignty · the five problem dimensions · El Salvador / Venezuela / Brazil / MexicoLatin America is the third guest-lectured region (Dr Silvia Montaña-Niño, Week 10), and the lecture title is the thesis: “Between Populism and Corporate Platforms: The Crisis of Digital Governance in Latin America.” The region is read through a post-colonial legacy — from colonies to unstable democracies and, at times, autocratic regimes — layered with highly concentrated media, government–media alliances and a freedom of expression under continuous pressure.
- 'Between populism and corporate platforms' — the thesis
- Digital corporate sovereignty (Becerra & Waisbord)
- Why the 'absence of cybernationalism' is the comparative hook
- The five problem dimensions (divide → AI / cloud dependency)
- Regulatory weakness over codified law (Brazil's LGPD in context)
- Four cases — El Salvador, Venezuela, Brazil, Mexico
IGOs and the Future
ITU · OECD · UNESCO · WTO · soft vs hard law · Gorwa's typology · bias, divides & data sovereigntyWhen a problem is genuinely transnational, governance climbs above the nation-state to the intergovernmental organisation (IGO) — bodies that rarely command and mostly coordinate, standardise and persuade.
- The IGO layer — ITU, OECD, UNESCO, WTO/GATS, WIPO
- Why the ITU's age (1865) matters
- Soft law vs hard law — the trade-off at the heart of global governance
- The OECD AI Principles vs the Budapest Convention
- Gorwa's four-level intervention typology (who acts)
- The 'Technology 4.0 vs Policy 1.0' diagnosis
The subject builds a toolkit (datafication, the fluid data ecology, sovereignty vs jurisdiction, data colonialism), sets out three regulation philosophies (rights-based, market-based, state-control), then runs a region-by-region tour: the EU’s GDPR, the Anglo-American market model, Africa, Asia, Latin America and the global bodies. There is no exam.
Your whole grade comes from writing: a 50% argumentative essay, a 25% policymaker pitch and a 25% case study, with an 80% attendance hurdle. The one skill rewarded everywhere is narrowing a vast debate into one sharp, evidence-backed argument — so this guide teaches each model and region to that standard.
Worked example · free
Narrowing a planet-sized prompt — the move every task rewards, step by step
- +1Diagnose the scope. “The internet” + “governed” + “nationally or globally” is planet-sized — a survey, not an argument. Markers reward a tight scope and a defended claim, and punish broad description.
- +2Add one actor + one instrument/incident + one dimension. Pick Australia (actor), the News Media Bargaining Code (instrument), and the national-vs-global dimension — now the question is answerable in 2500 words.
- +1State a contestable thesis outright. “Australia’s unilateral Bargaining Code was a legitimate national response to a gatekeeper-power market failure that no global body was positioned to fix.” One sentence, not buried.
- +1Name the model and where it breaks. Argue through national vs global governance: the “legal arms race” bind cuts both ways — Meta’s 2024 withdrawal shows national levers are brittle against globally mobile actors.
- +1Pre-empt the counter. Concede the strongest objection (fragmentation / a splinternet) and answer it, so the marker sees both sides on the table — a fence-sit cannot earn full marks, but a defended position can.
Key terms
- The fluid data ecology
- The subject’s signature concept: unlike old territorially-anchored media, today’s data flows globally and continuously across borders, so it strains nation-bounded law. Almost every problem in the course is a response to this fluidity.
- Data / digital sovereignty
- A state’s (or group’s) claim to control data, infrastructure and standards relating to its territory and people. Couture & Toupin show it is plural and contested — national, individual, Indigenous and notional ‘platform’ versions all compete.
- Jurisdiction
- The right of a legal authority to enforce laws over subject matter within its territory. The online tension: jurisdiction assumes a world cleanly divided into territories, but the internet is borderless — so a state can write a law it cannot enforce.
- The Brussels effect
- How an EU rule (GDPR) spreads beyond the EU’s borders because any firm wanting EU-market access must comply everywhere — the clearest example of extraterritorial regulatory reach, and the EU’s soft power as a ‘Regulatory Superpower’.
- Data colonialism
- The extraction of data and knowledge from peoples — especially Indigenous communities and the Global South — in ways that reproduce colonial power asymmetries (Mejias & Couldry). The critical counterpoint to the cheerful ‘free flow of data’ story.
MECM90002 FAQ
Is MECM90002 hard?
It is conceptually demanding rather than technical: there is no exam and no maths, but the marks reward precise argument under a tight word count. The difficulty is narrowing a planet-sized debate into one defensible, well-cited claim — and doing it three times (essay, pitch, case study).
How is MECM90002 assessed?
Entirely by writing and one short talk — there is no exam. The breakdown is a 2500-word argumentative essay (50%), a 3-minute policymaker pitch (25%) and a 1500-word case study (25%), plus an 80% attendance hurdle you must clear to pass. Confirm this year’s exact weights and due dates in your subject guide.
What is MECM90002 about?
How governments, blocs, platforms and global bodies try to regulate a borderless internet. It builds a conceptual toolkit (datafication, the fluid data ecology, sovereignty, jurisdiction), three regulation models (rights-based, market-based, state-control), then tours the EU, the USA/UK/Australia, Africa, Asia, Latin America and the intergovernmental layer.
Do I need a law or coding background for MECM90002?
No. It is an Arts (Media & Communications) subject. You read real laws (GDPR, the DSA, the DMA, the AI Act) and real cases, but you are assessed on argument and analysis, not legal drafting or code. A clear, well-evidenced position matters far more than technical depth.
Is using AskSia for MECM90002 cheating?
No. AskSia is a study reference written in our own words — we host none of your lecturer’s files, and Sia teaches you the method (how to narrow a debate, name a model and build an argument) to earn the marks; it does not write or submit your assessments for you.
Questions students ask in each MECM90002 chapter
- Which concept matters most for the assessments?
- The fluid data ecology — the idea that data flows globally while power and law stay national. Almost every later chapter is this tension applied to a region, and almost every strong essay opens by naming it precisely, then narrows to one country or platform. Cite it once, early, to lift writing from description to analysis. Chapter 01 · Key Concepts and Debates
- Are the three philosophies real categories or just a teaching device?
- Both — but treat them as a lens, not a box. They genuinely organise the field (rights/market/state-control map onto the EU, the Anglosphere, and Russia/China), but real regimes are hybrids. The US is market-led yet wields antitrust (a public-power tool) and First-Amendment speech rights; Australia is market-leaning but selectively interventionist. The marks are in showing the blend, not forcing a pure type. Chapter 02 · Governance Models
- Why is the EU treated as the course's reference point?
- Because every other region is partly defined by how far it sits from Brussels. The EU is the clearest rights-based pole: it wrote enforceable individual rights into binding law and exported them. Cervi (2022) supplies the single sharpest contrast — the EU exported data-protection law to four continents while the US still has no federal data-protection law. Build comparisons around that asymmetry. Chapter 03 · The European Union Approach
- What is the single sharpest contrast in this chapter?
- The US has no federal privacy law, while the EU exported one to four continents (Cervi, 2022). It is the cleanest essay anchor: build the comparison on that asymmetry, then place the UK (duty of care) and Australia (selective interventionism) between the US self-regulation pole and the EU rights-based pole. Chapter 04 · The US, UK and Australia
- What is the single most important framing for the Africa chapter?
- ‘Between two paradigms.’ Africa is read as navigating between the colonial-era development-communication inheritance and a new mobile-first leap-frogging sphere, without resolving into either. A strong essay holds both stories at once — challenges and opportunities in parallel — and refuses the lazy single story of either Afro-pessimism or techno-optimism. Chapter 05 · African Perspectives
- Why does Asia have no GDPR-equivalent, and why does it matter?
- Because the region spans 48 countries and a mix of democratic, authoritarian and semi-authoritarian systems with no supra-national drafter — so no uniform rights-based data-protection framework emerged. It matters structurally: regulation tends to arrive as criminal penalties and content controls (imprisonment, fines, blocking) rather than as data-subject rights, which reshapes every case in the region. Chapter 06 · Asian Perspectives
- What is the single most important concept for the LATAM chapter?
- Digital corporate sovereignty. On Becerra & Waisbord’s reading, Latin America has accepted corporate self-regulation as its bedrock principle, so platforms — not the state or the citizen — become the gatekeepers of public discourse. Everything else in the chapter (the five dimensions, the four cases) illustrates this surrender of sovereignty. Chapter 07 · Latin American Perspectives
- Why does the IGO layer rely mostly on soft law?
- Because soft law is the IGO’s natural register. It can be drafted, agreed and revised far faster than a treaty, keeps pace with technology, and sidesteps the sovereignty objections that stall binding instruments. The OECD AI Principles are the model: the first intergovernmental AI standard, voluntarily adhered to by 47 jurisdictions, providing a common vocabulary that makes national rules interoperable even though none is compelled. Chapter 08 · IGOs and the Future
How to study for the exam
Treat the three tasks as one pipeline, not three islands: the reading you do for the essay (A1) seeds the pitch (A2), and the pitch is the rough cut of the case study (A3).
Build the toolkit first (Ch 1–2) so the vocabulary — the fluid data ecology, sovereignty vs jurisdiction, the rights/market/state-control grid — is yours, then use the regional chapters (EU, US/UK/AU, Africa, Asia, Latin America, the IGOs) as a comparison bank.
For every claim, run the two recurring moves: narrow (one actor + one instrument + one dimension) then analyse (name a model and say where it breaks). Because there is no exam, your safest marks are a sharply-scoped thesis, named scholars used as load-bearing citations, and a counter-argument you pre-empt rather than ignore.
