Thursday 12 June 2014

Microsoft fights US warrant for customer data stored overseas

In the latest challenge to the reach of law enforcement in the digital age, Microsoft and its Web-based email service are pushing back against a US government search warrant for customer emails stored in a data center overseas.
In court papers made public Monday, Microsoft's attorneys list their objections to a judge's order that the company comply with a warrant issued in December for a customer's email-account data stored in Dublin, Ireland.
"The government takes the extraordinary position," the filing reads, "that by merely serving such a warrant on any US-based email provider, it has the right to obtain the private emails of any subscriber, no matter where in the world the data may be located, and without the knowledge or consent of the subscriber or the relevant foreign government where the data is stored."
The release of the court papers follows a year of high-profile challenges to government access to data, which were sparked by former National Security Agency contractor Edward Snowden's leak of secret agency documents.
Among other things, the Snowden controversy raised questions about whether laws related to search and seizure need to be updated in light of rapid technological change that's made it easier to scoop up all sorts of data, including private phone calls, email exchanges, photos, and videos.
Data regularly zips around the planet now, too, traversing national borders and spending time in foreign data centers. That's raised concern that US defense and law enforcement agencies have been meddling where they shouldn't and treading on the rights of foreign citizens. Overseas governments and customers have also worried that US companies might be in the back pocket of the NSA and other government outfits.
Microsoft's lawyers pick up on those last themes, cautioning that allowing warrants like the one in question would "violate international laws and treaties, and reduce the privacy protection of everyone on the planet," as well as "have a significant negative impact on Microsoft's business, and the competitiveness of US cloud providers in general."
"Over the course of the past year," the filing reads, "Microsoft and other US technology companies have faced growing mistrust and concern about their ability to protect the privacy of personal information located outside the United States. The government's position in this case further erodes that trust, and will ultimately erode the leadership of US technology companies in the global market."
The government, on the other hand, said in its own filing in April that Microsoft's position would lead to "absurd" and "arbitrary" results that would have "a devastating impact on the government's ability to conduct criminal investigations."
"It is entirely conceivable," government lawyers wrote, "that, based on where a service provider decided to store information on a given day due to its own technical requirements, or even its views on whether the government should have access to the data, it could reject [a warrant] one day but accept it the next."
"Microsoft's position creates a[n]...absurdity," the government argued elsewhere in the document, "because it stores email content overseas based on where its subscribers claim to live. Under Microsoft's view...criminals using a US service provider could avoid lawful process to obtain stored content in their accounts simply by representing falsely that they live outside the country."
The case so far has hinged on legal arcana involving subpoenas versus search warrants, as well as the implications of international treaties and the relevance of the 1986 Electronic Communications Privacy Act. The government's reply to the Microsoft filing is expected in July, with oral arguments in the case to begin several weeks after that. Verizon filed a friend-of-the-court brief Tuesday in support of Microsoft's position.
The identity and nationality of the holder of the Microsoft email account in question have not been revealed. The warrant is thought to be related to a narcotics case.
http://www.cnet.com/news/microsoft-fights-us-warrant-for-customer-data-stored-overseas/