There are other, legal ways to nab Microsoft emails, privacy groups remind Supremes

Redmond finds allies in Irish data centre spat

By Rebecca Hill


Allowing Uncle Sam to seize emails stored in Microsoft's Irish data centre would violate foreign data protection laws and risk setting a damaging precedent, the US Supreme Court has been told.

In briefs filed in the long-running dispute, IBM and international campaign groups argued that the government does have other ways of gaining the information.

They are lobbying for the Supreme Court to uphold the decision made by the United States Court of Appeals for the Second Circuit, which ruled in Microsoft's favour. The Supremes were brought into the spat after the US Department of Justice appealed the Second Circuit's decision.

Privacy International, backed by 26 other global rights groups, filed an amicus brief (PDF) that warned of the "profound implications for the resilience of data protection laws all over the world".

It argued that in demanding access to emails stored in servers in another country, the warrant "flatly conflicts with Irish and European Union law".

The brief said there was no existing case law that directed the result, and pointed out that there are established government-to-government channels for transfer of personal data to law enforcement, called mutual legal assistance treaties (MLAT).

"Rather than relying on the process established through these MLATs," Privacy International said, "the US government is seeking to unilaterally seize data held in Ireland, conflicting with both Irish and EU data protection laws, and undermining the right to privacy that those laws were designed to protect."

A similar argument was made by IBM, which said the government has "ample tools at its disposal, aside from the [Stored Communications Act], to obtain the same data that it seeks here".

MLATs "may be imperfect... [but] they are not unworkable", IBM said in its amicus curiae (PDF). It added that although the Stored Communications Act needed to be updated to "reflect contemporary technological developments, such as the cloud, that is a problem for Congress, not this Court, to rectify".

Oi, force Microsoft to cough up emails on Irish servers to the Feds, US states urge Supremes


Both IBM and Privacy International warned of the effect granting the DoJ access would have on future cases and other companies.

"Similar violations of foreign law would occur in countless other cases if the Government is given the expansive authority to issue extraterritorial warrants that it now seeks," said Privacy International.

The group argued that, if granted, the US government's demand "creates an untenable situation for many other companies" because it would set a precedent.

"Companies would increasingly be in the position of having to potentially violate the laws of the countries in which they operate in order to comply with warrants issued in the US," the campaign group said.

Meanwhile, IBM said that it could damage US cloud providers' business prospects.

The court should "recognize that while this case involves an individual cloud user, the Court's decision may well have a significant impact on enterprises", Big Blue said.

It argued that – unlike individuals – enterprise clients can, and do, "contract for a menu of specific conditions relating to data storage and maintenance, including the data's physical location".

This is crucial to the case because the US government has argued that Microsoft has the sole power to choose where it stores data, and should be able to migrate it back to the US, to hand it over to the government.

IBM said that allowing access to cloud data stored abroad would "significantly disadvantage US cloud services providers when it comes to competing for enterprise clients, who may prefer to use cloud services from a company with no presence in the United States".

It added: "This concern is not a hypothetical; it was on full display following disclosures about the US government's surveillance programs, and it continues to be a topic of significant concern for enterprise customers today."

Both briefs urged the Supreme Court to affirm the judgment of the Second Circuit.

Oral arguments are due to be heard in the case at the end of next month. ®

Sign up to our NewsletterGet IT in your inbox daily


More from The Register

Microsoft partner portal 'exposes 'every' support request filed worldwide' today

Exclusive No customer data visible but hell's bells, Redmond, what have you borked now?

Home users due for a battering with Microsoft 365 subscription stick

Job opening at Redmond points to new consumer services

It’s baaack – Microsoft starts pushing out the Windows 10 October 2018 Update

Set to update automatically? Say hello to my little friend…

US Department of Defense to sling an estimated $3.17bn at Microsoft resellers

Cash to be splashed over 10 years on software sporting a Microsoft badge

Microsoft pulls Office 2010 updates because they're big in Japan. As in, big pain in the ASCII

Software performance tweaks have opposite effect

It WASN'T the update, says Microsoft: Windows 7 suffers identity crisis as users hit by activation errors

Activation server fiddling on day of monthly update... really?

It's the wobbly Microsoft service sweepstake! If you have 'Teams', you've won a lifetime Slack sub

Just kidding, no one deserves that. But you'd be right

Pull request accepted: You want to buy GitHub, Microsoft? Go for it – EU

Eurocrats reckon that anti-competitiveness from Redmond would be a massive foot-shooting exercise

New era for Japan, familiar problems: Microsoft withdraws crash-tastic patches

Upcoming calendar change more than Office can handle

Microsoft has signed up to the Open Invention Network. We repeat. Microsoft has signed up to the OIN

That 60,000 patents in your pocket or are you just pleased to see us?