Microsoft Protests Order for Email Stored Abroad

Release time：2014-06-11
Browse：6237

Microsoft is challenging the authority of federal prosecutors to force the giant technology company to hand over a customer’s email stored in a data center in Ireland.

The objection is believed to be the first time a corporation has challenged a domestic search warrant seeking digital information overseas. The case has attracted the concern of privacy groups and major United States technology companies, which are already under pressure from foreign governments worried that the personal data of their citizens is not adequately protected in the data centers of American companies.

Verizon filed a brief on Tuesday, echoing Microsoft’s objections, and more corporations are expected to join. The Electronic Frontier Foundation is working on a brief supporting Microsoft. European officials have expressed alarm.

In a court filing made public on Monday, Microsoft said that if the judicial order to surrender the email stored abroad is upheld, it “would violate international law and treaties, and reduce the privacy protection of everyone on the planet.”

The search warrant was granted by a federal magistrate judge in New York last December, as part of a criminal inquiry. Neither the identity nor the nationality of the customer has been revealed. The company objected, saying that because the customer’s emails were stored in Dublin, they were beyond the reach of a domestic search warrant. Search warrants seeking information abroad are rare, experts said.

But Microsoft lost that round two months ago, and this week is beginning its push for a reversal in Federal District Court in New York.

“This is a policy decision as well as a legal one,” said Peter Swire, a professor at the Georgia Institute of Technology, who served on a White House advisory group on intelligence and communications technologies last year.

In a criminal proceeding, the debate plays out in public court filings from the outset. That openness is in sharp contrast with intelligence data harvesting, which was conducted for years in secrecy, with minimal review, until Edward J. Snowden’s leaks showed the extent of clandestine information gathering by the National Security Agency.

In his ruling in April, James C. Francis, a magistrate judge in federal court in New York, wrote, “Microsoft’s argument is simple, perhaps deceptively so.”

Microsoft contends that the rules that apply to a search warrant in the physical world should apply online. The standard of proof for a search warrant is “probable cause” and “particularity” — that is, a person’s name and where the person, evidence or information reside.

A subpoena — the less powerful court-ordered investigation tool — requires only that the information is “relevant to an ongoing investigation.” But a subpoena, unlike a search warrant, requires that the person being investigated be informed.

Judge Francis, in his order, wrote that the Electronic Communications Privacy Act, passed in 1986, created an in-between category intended at the time to protect people from indiscriminate data gathering that subpoenas might allow of online communications. The result, he wrote, is “a hybrid: part search warrant and part subpoena,” and applied to information held in Microsoft’s data center overseas.

rivacy experts are concerned that the judge’s order, if it stands, will open the gate to unchecked investigations in the digital world, of anyone, anywhere. “United States search warrants do not have extraterritorial reach,” said Lee Tien, a lawyer for the Electronic Frontier Foundation. “The government is trying to do an end run.”

But the Justice Department asserts that Microsoft is stretching the law. In a filing, Preet Bharara, United States attorney for the Southern District of New York, described the company’s analogy between physical search warrants and digital ones as “misguided,” and said Internet companies cannot avoid complying with a search warrant “simply by storing the data abroad.”

If Microsoft prevailed, he wrote, it would be “a dangerous impediment to the ability of law enforcement to gather evidence of criminal activity.”

A spokeswoman for his office said it would have no comment beyond the court filings.

Governments routinely exchange information in criminal cases through cooperative agreements called mutual legal assistance treaties. In his order, Judge Francis cited a source saying the treaty process could be “slow and laborious.”

But Mr. Swire, an Internet policy and privacy expert, said these treaties were the appropriate mechanism for obtaining information from abroad in criminal cases. And he noted that the Obama administration had sought increased funding for handling legal assistance treaty cases.

The warrant suggests that the inquiry involves drugs. The warrant specifically requests any email or other communications “pertaining to narcotics, narcotics trafficking, importation of narcotics into the United States” and related money laundering.

Industry experts say it is highly likely the person whose emails were sought resided in Europe when using the Microsoft web email service, Outlook.com (though the customer apparently used an address with the service through its previous name, MSN.com).

For faster service, the big online service providers — like Google, Microsoft, Amazon and Yahoo — locate data centers near major markets around the world. Data is typically stored nearest the customer’s location, for shorter transmission distances.

In its court filing this week, Microsoft said its global network of data centers included more than one million computers in more than 100 data centers spread over 40 countries.

The Snowden leaks and the view that American tech companies were too cooperative with the United States government have hurt the prospects for American tech companies abroad. Earlier estimates of potential lost sales over the next few years have ranged as high as $180 billion, or 25 percent of industry revenue, according to Forrester Research.

To address those concerns, the companies are building more data centers abroad. But that strategy looks less appealing if companies can be ordered to hand over data regardless of where it is stored, as Microsoft is being ordered to do.

In its filing, Microsoft emphasized that point. The government’s position, it warned, will “ultimately erode the leadership of U.S. technology companies in the global market.”

The case is expected to run for some time. Oral arguments, before Judge Loretta A. Preska, are scheduled for July 31. After her ruling, there may be appeals.

Whatever the outcome, Orin Kerr, a professor at George Washington University Law School, said Congress needs to update the Electronic Communications Privacy Act of 1986. Back then, he noted, dial-up service from CompuServe was the state of the art. “The idea of having email stored abroad was not something that was imagined when the law was passed,” he said.

.HK is the internet country code top-level domain (ccTLD) for Hong Kong.
It was created in 1990. Up to 2002, .hk was administered by the Joint University Computer Center, which is the operating arm responsible for the day-to-day running of the registration service.
.HK -Become the Most Lucrative Marketplaces in Hong Kong.
.HK domain names can be registered at both the second level and third level. Both English and Chinese characters are allowed. Following are the categories of third-level domains available. Each category has both an English and Chinese suffix to choose from.
.HK: For everyone
.COM.HK: For companies or firms (Taiwanese or foreign) registered under the laws of their countries.
Price : $ 28 / yr Contact us to get a lower price

If you would like to register .hk domain name,please contact us as soon as possible.

Email:support@eranet.com
Tel:852-39995400
- See more at: http://www.eranet.com/

Document

Product Recommendation