Security

There are other, legal ways to nab Microsoft emails, privacy groups remind Supremes

Redmond finds allies in Irish data centre spat

By Rebecca Hill

35 SHARE

Allowing Uncle Sam to seize emails stored in Microsoft's Irish data centre would violate foreign data protection laws and risk setting a damaging precedent, the US Supreme Court has been told.

In briefs filed in the long-running dispute, IBM and international campaign groups argued that the government does have other ways of gaining the information.

They are lobbying for the Supreme Court to uphold the decision made by the United States Court of Appeals for the Second Circuit, which ruled in Microsoft's favour. The Supremes were brought into the spat after the US Department of Justice appealed the Second Circuit's decision.

Privacy International, backed by 26 other global rights groups, filed an amicus brief (PDF) that warned of the "profound implications for the resilience of data protection laws all over the world".

It argued that in demanding access to emails stored in servers in another country, the warrant "flatly conflicts with Irish and European Union law".

The brief said there was no existing case law that directed the result, and pointed out that there are established government-to-government channels for transfer of personal data to law enforcement, called mutual legal assistance treaties (MLAT).

"Rather than relying on the process established through these MLATs," Privacy International said, "the US government is seeking to unilaterally seize data held in Ireland, conflicting with both Irish and EU data protection laws, and undermining the right to privacy that those laws were designed to protect."

A similar argument was made by IBM, which said the government has "ample tools at its disposal, aside from the [Stored Communications Act], to obtain the same data that it seeks here".

MLATs "may be imperfect... [but] they are not unworkable", IBM said in its amicus curiae (PDF). It added that although the Stored Communications Act needed to be updated to "reflect contemporary technological developments, such as the cloud, that is a problem for Congress, not this Court, to rectify".

Oi, force Microsoft to cough up emails on Irish servers to the Feds, US states urge Supremes

READ MORE

Both IBM and Privacy International warned of the effect granting the DoJ access would have on future cases and other companies.

"Similar violations of foreign law would occur in countless other cases if the Government is given the expansive authority to issue extraterritorial warrants that it now seeks," said Privacy International.

The group argued that, if granted, the US government's demand "creates an untenable situation for many other companies" because it would set a precedent.

"Companies would increasingly be in the position of having to potentially violate the laws of the countries in which they operate in order to comply with warrants issued in the US," the campaign group said.

Meanwhile, IBM said that it could damage US cloud providers' business prospects.

The court should "recognize that while this case involves an individual cloud user, the Court's decision may well have a significant impact on enterprises", Big Blue said.

It argued that – unlike individuals – enterprise clients can, and do, "contract for a menu of specific conditions relating to data storage and maintenance, including the data's physical location".

This is crucial to the case because the US government has argued that Microsoft has the sole power to choose where it stores data, and should be able to migrate it back to the US, to hand it over to the government.

IBM said that allowing access to cloud data stored abroad would "significantly disadvantage US cloud services providers when it comes to competing for enterprise clients, who may prefer to use cloud services from a company with no presence in the United States".

It added: "This concern is not a hypothetical; it was on full display following disclosures about the US government's surveillance programs, and it continues to be a topic of significant concern for enterprise customers today."

Both briefs urged the Supreme Court to affirm the judgment of the Second Circuit.

Oral arguments are due to be heard in the case at the end of next month. ®

Sign up to our NewsletterGet IT in your inbox daily

35 Comments

More from The Register

Azure certifications are awful, Microsoft admits, so it has made new ones

Changes to add ‘more of the skills that you actually need to be successful’

Microsoft pulls the plug on Windows 7, 8.1 support forums

Have you tried turning it off and.. err… off again?

Microsoft Store adds ‘private audience’ apps to its Store

A velvet rope for digital tat, to help with betas, promos and maybe Windows 10 S

Microsoft open-sources UI Recorder tool for Windows 10 developers

An easy way to create automated user-interface tests

Microsoft wants serious, non-gaming developers to make more money

Build Planned dev deal tweak lets programmers keep 95 per cent of revenue

Git365. Git for Teams. Quatermass and the Git Pit. GitHub simply won't do now Microsoft has it

Poll Tell us, what should the source shack be called post-Redmondisation?

Microsoft tries cutting the Ribbon in Office UI upgrade

We gotta put this in context, cos that's what Microsoft says matters these days

Even Microsoft's lost interest in Windows Phone: Skype and Yammer apps killed

Use iOS or Android, says Redmond, as telephony APIs sprout in Windows

Microsoft bids adieu to inky fingers with whiteboard app

Didn't we have one of those already? Yes, but this empowers ideation!

Class-action status snub for lawsuit alleging Microsoft mistreatment of women workers

Updated Redmond slips out of key provision in discrimination case