Monday, June 16, 2014

Can the government order an ISP to relinquish documents stored overseas? This is a great question and nicely addressed in the article below.
=================================================


Microsoft Protests Order to Disclose Email Stored Abroad
By STEVE LOHRJUNE 10, 2014 NY Times

campaign: nyt2014_sharetools_mkt_topstories_478QW -- 247890, creative: nyt2014_sharetools_mktg_topstories_478QW -- 373809, page: www.nytimes.com/yr/mo/day/technology/microsoft-protests-order-for-email-stored-abroad.html, targetedPage: www.nytimes.com/yr/mo/day/technology, position: MiddleLeft
Microsoft is challenging the authority of federal prosecutors to force the giant technology company to hand over a customer’s email stored in a data center in Ireland.
The objection is believed to be the first time a corporation has challenged a domestic search warrant seeking digital information overseas. The case has attracted the concern of privacy groups and major United States technology companies, which are already under pressure from foreign governments worried that the personal data of their citizens is not adequately protected in the data centers of American companies.
Verizon filed a brief on Tuesday, echoing Microsoft’s objections, and more corporations are expected to join. The Electronic Frontier Foundation is working on a brief supporting Microsoft. European officials have expressed alarm.
In a court filing made public on Monday, Microsoft said that if the judicial order to surrender the email stored abroad is upheld, it “would violate international law and treaties, and reduce the privacy protection of everyone on the planet.”
The search warrant was granted by a federal magistrate judge in New York last December, as part of a criminal inquiry. Neither the identity nor the nationality of the customer has been revealed. The company objected, saying that because the customer’s emails were stored in Dublin, they were beyond the reach of a domestic search warrant. Search warrants seeking information abroad are rare, experts said.
But Microsoft lost that round two months ago, and this week is beginning its push for a reversal in Federal District Court in New York.
“This is a policy decision as well as a legal one,” said Peter Swire, a professor at the Georgia Institute of Technology, who served on a White House advisory group on intelligence and communications technologies last year.
In a criminal proceeding, the debate plays out in public court filings from the outset. That openness is in sharp contrast with intelligence data harvesting, which was conducted for years in secrecy, with minimal review, until Edward J. Snowden’s leaks showed the extent of clandestine information gathering by the National Security Agency.
In his ruling in April, James C. Francis, a magistrate judge in federal court in New York, wrote, “Microsoft’s argument is simple, perhaps deceptively so.”
Microsoft contends that the rules that apply to a search warrant in the physical world should apply online. The standard of proof for a search warrant is “probable cause” and “particularity” — that is, a person’s name and where the person, evidence or information reside.
A subpoena — the less powerful court-ordered investigation tool — requires only that the information is “relevant to an ongoing investigation.” But a subpoena, unlike a search warrant, requires that the person being investigated be informed.
Judge Francis, in his order, wrote that the Electronic Communications Privacy Act, passed in 1986, created an in-between category intended at the time to protect people from indiscriminate data gathering that subpoenas might allow of online communications. The result, he wrote, is “a hybrid: part search warrant and part subpoena,” and applied to information held in Microsoft’s data center overseas.
Privacy experts are concerned that the judge’s order, if it stands, will open the gate to unchecked investigations in the digital world, of anyone, anywhere. “United States search warrants do not have extraterritorial reach,” said Lee Tien, a lawyer for the Electronic Frontier Foundation. “The government is trying to do an end run.”
But the Justice Department asserts that Microsoft is stretching the law. In a filing, Preet Bharara, United States attorney for the Southern District of New York, described the company’s analogy between physical search warrants and digital ones as “misguided,” and said Internet companies cannot avoid complying with a search warrant “simply by storing the data abroad.”
If Microsoft prevailed, he wrote, it would be “a dangerous impediment to the ability of law enforcement to gather evidence of criminal activity.”
A spokeswoman for his office said it would have no comment beyond the court filings.
Governments routinely exchange information in criminal cases through cooperative agreements called mutual legal assistance treaties. In his order, Judge Francis cited a source saying the treaty process could be “slow and laborious.”
But Mr. Swire, an Internet policy and privacy expert, said these treaties were the appropriate mechanism for obtaining information from abroad in criminal cases. And he noted that the Obama administration had sought increased funding for handling legal assistance treaty cases.
The warrant suggests that the inquiry involves drugs. The warrant specifically requests any email or other communications “pertaining to narcotics, narcotics trafficking, importation of narcotics into the United States” and related money laundering.
Industry experts say it is highly likely the person whose emails were sought resided in Europe when using the Microsoft web email service, Outlook.com (though the customer apparently used an address with the service through its previous name, MSN.com).
For faster service, the big online service providers — like Google, Microsoft, Amazon and Yahoo — locate data centers near major markets around the world. Data is typically stored nearest the customer’s location, for shorter transmission distances.
In its court filing this week, Microsoft said its global network of data centers included more than one million computers in more than 100 data centers spread over 40 countries.
The Snowden leaks and the view that American tech companies were too cooperative with the United States government have hurt the prospects for American tech companies abroad. Earlier estimates of potential lost sales over the next few years have ranged as high as $180 billion, or 25 percent of industry revenue, according to Forrester Research.
To address those concerns, the companies are building more data centers abroad. But that strategy looks less appealing if companies can be ordered to hand over data regardless of where it is stored, as Microsoft is being order.
In its filing, Microsoft emphasized that point. The government’s position, it warned, will “ultimately erode the leadership of U.S. technology companies in the global market.”
The case is expected to run for some time. Oral arguments, before Judge Loretta A. Preska, are scheduled for July 31. After her ruling, there may be appeals.
Whatever the outcome, Orin Kerr, a professor at George Washington University Law School, said Congress needs to update the Electronic Communications Privacy Act of 1986. Back then, he noted, dial-up service from CompuServe was the state of the art. “The idea of having email stored abroad was not something that was imagined when the law was passed,” he said.
===============================
In addition to this blog, I have authored the premiere book on Netiquette, "Netiquette IQ - A Comprehensive Guide to Improve, Enhance and Add Power to Your Email". You can view my profile, reviews of the book and content excerpts at:

 www.amazon.com/author/paulbabicki


 If you would like to listen to experts in all aspects of Netiquette and communication, try my radio show on BlogtalkRadio  and an online newsletter via paper.li.I have established Netiquette discussion groups with Linkedin and  Yahoo I am also a member of the International Business Etiquette and Protocol Group and Minding Manners among others. I regularly consult for the Gerson Lehrman Group, a worldwide network of subject matter experts and I have been contributing to the blogs Everything Email and emailmonday . My work has appeared in numerous publications and I have presented to groups such as The Breakfast Club of NJ Rider University and  PSG of Mercer County New Jersey.

==========================================


Looking for feedback on a location for the company picnic? Use Saepta to post that quick question to staff and review results in real time. Interested in a quick response from a few loyal customers regarding choosing a new product name? Saepta offers privacy through a direct link to a target list, providing you real time feedback that includes comments.

Saepta combines ease-of-use with powerful voting features to provide real-time feedback and comments. Visit saepta.com to experience the public version of social network voting, and visit get.saepta.com for additional information on deploying Saepta within your organization.
=======================================


No comments:

Post a Comment