In 'Hugely Important Case,' Federal Appeals Court Just Ruled in Favor of Privacy
Microsoft does not have to hand email data over to U.S. government, decision states
In what is being heralded as a win for privacy, a federal appeals court on Thursday ruled that Microsoft does not have to hand over to the U.S. government customer data held in another country.
According to Wired's senior writer Andy Greenberg, the ruling (pdf) by the 2nd U.S. Circuit Court of Appeals in Manhattan "just sent the American Justice Department a clear message about its ability to reach beyond U.S. borders to collect data with a search warrant: Keep your hands to yourself."
In its own statement welcoming the ruling, Microsoft calls it an "important decision for people everywhere."
"The decision is important for three reasons: it ensures that people's privacy rights are protected by the laws of their own countries; it helps ensure that the legal protections of the physical world apply in the digital domain; and it paves the way for better solutions to address both privacy and law enforcement needs," the statement adds.
TechDirt's Mike Masnick, meanwhile, writes that it "is a hugely important case concerning the privacy and security of our data."
Reuters summarizes the case thusly: "Microsoft had been challenging a warrant seeking emails stored on a server in Dublin, Ireland, in a narcotics case."
The Center for Democracy & Technology (CDT), which had filed an amicus brief in support of Microsoft in the case, has a backgrounder which explains the details more fully. It states, in part:
The animating question in this case is whether a U.S. law enforcement agency can compel a U.S. provider of communications service to disclose the content of digital information the provider stores outside the U.S. The Stored Communications Act (SCA), part of the Electronic Communications Privacy Act (ECPA) of 1986, does not explicitly address the issue. The SCA authorizes the Government to seek the contents of stored communications that are more than 180 days old, using a subpoena, a court order issued under 18 USC 2703(d), or a warrant. The Government takes the position that a subpoena can also compel disclosure of opened email no matter its age. However, Microsoft and most other large providers apply U.S. v. Warshak, 631 F.3d 266 (6th Cir. 2010) on a nationwide basis, and require warrants for all content. As a result, the stakes about resolution of this case are quite high: does a U.S. provider put content out of the reach of the U.S. government acting under the SCA by storing the data abroad?
The judges sided with Microsoft, writing in their decision:
We conclude that Congress did not intend the SCA's warrant provisions to apply extraterritorially. The focus of those provisions is protection of a user's privacy interests. Accordingly, the SCA does not authorize a U.S. court to issue and enforce an SCA warrant against a United States-based service provider for the contents of a customer's electronic communications stored on servers located outside the United States. The SCA warrant in this case may not lawfully be used to compel Microsoft to produce to the government the contents of a customer's e-mail account stored exclusively in Ireland. Because Microsoft has otherwise complied with the Warrant, it has no remaining lawful obligation to produce materials to the government.
"This ruling is a major affirmation that the rights we enjoy in the physical world continue to apply in the digital world," said Greg Nojeim, director of CDT's Freedom, Security, and Technology Project. "By declaring that a U.S. warrant cannot reach communications content stored abroad, the court ruled strongly in favor of privacy and national rule of law."
"Had the Department of Justice prevailed in this case," Nojeim continued, "other countries would follow the U.S. lead and start claiming access to data stored here in the U.S. based on their own laws. It would have been like the Wild West and disaster for privacy."
The appeals court rule may not be the end of the road. CNNMoney reports that "because of the significant implications about privacy and the limitations put on American law enforcement, it's a case that could make its way to the Supreme Court."
We are at a crossroads
This country and this world are at a monumental crossroads. In a few short weeks, US voters will have an opportunity to beat back the forces of fascism and confront the billionaires who are rigging the economy, our media system, and our democracy, making it increasingly impossible for ordinary people to get by. We’re not just talking about the election. We’re talking about what must be done once these fascist elements are vanquished from power. We need a bolder set of solutions than what either major party has so far been willing to offer and a working-class movement ready to fight like hell for it. Trump didn't emerge from nowhere. The conditions that fueled MAGA authoritarianism were created by decades of radical neoliberal economic policies and a corrupt political system dominated by corporate interests. They slashed taxes on the super-rich, promising that the benefits would trickle down. They said giveaways to the corporate titans would make life more affordable for the rest of us. It was all bullshit. And when a bitter, betrayed populace searches for someone to blame, right-wing demagogues have little trouble finding scapegoats. People know when they're being lied to, but you won't hear any of this from the corporate media. Only independent journalism—powered and funded by people who believe in building a better world—can deliver truly trustworthy daily news. Our Fall Campaign is underway, and we need your help. To power our newsroom through the rest of the year, we need to raise $125,000 by midnight on October 31. So if you share our vision, please contribute whatever you can to sustain our work. |
In what is being heralded as a win for privacy, a federal appeals court on Thursday ruled that Microsoft does not have to hand over to the U.S. government customer data held in another country.
According to Wired's senior writer Andy Greenberg, the ruling (pdf) by the 2nd U.S. Circuit Court of Appeals in Manhattan "just sent the American Justice Department a clear message about its ability to reach beyond U.S. borders to collect data with a search warrant: Keep your hands to yourself."
In its own statement welcoming the ruling, Microsoft calls it an "important decision for people everywhere."
"The decision is important for three reasons: it ensures that people's privacy rights are protected by the laws of their own countries; it helps ensure that the legal protections of the physical world apply in the digital domain; and it paves the way for better solutions to address both privacy and law enforcement needs," the statement adds.
TechDirt's Mike Masnick, meanwhile, writes that it "is a hugely important case concerning the privacy and security of our data."
Reuters summarizes the case thusly: "Microsoft had been challenging a warrant seeking emails stored on a server in Dublin, Ireland, in a narcotics case."
The Center for Democracy & Technology (CDT), which had filed an amicus brief in support of Microsoft in the case, has a backgrounder which explains the details more fully. It states, in part:
The animating question in this case is whether a U.S. law enforcement agency can compel a U.S. provider of communications service to disclose the content of digital information the provider stores outside the U.S. The Stored Communications Act (SCA), part of the Electronic Communications Privacy Act (ECPA) of 1986, does not explicitly address the issue. The SCA authorizes the Government to seek the contents of stored communications that are more than 180 days old, using a subpoena, a court order issued under 18 USC 2703(d), or a warrant. The Government takes the position that a subpoena can also compel disclosure of opened email no matter its age. However, Microsoft and most other large providers apply U.S. v. Warshak, 631 F.3d 266 (6th Cir. 2010) on a nationwide basis, and require warrants for all content. As a result, the stakes about resolution of this case are quite high: does a U.S. provider put content out of the reach of the U.S. government acting under the SCA by storing the data abroad?
The judges sided with Microsoft, writing in their decision:
We conclude that Congress did not intend the SCA's warrant provisions to apply extraterritorially. The focus of those provisions is protection of a user's privacy interests. Accordingly, the SCA does not authorize a U.S. court to issue and enforce an SCA warrant against a United States-based service provider for the contents of a customer's electronic communications stored on servers located outside the United States. The SCA warrant in this case may not lawfully be used to compel Microsoft to produce to the government the contents of a customer's e-mail account stored exclusively in Ireland. Because Microsoft has otherwise complied with the Warrant, it has no remaining lawful obligation to produce materials to the government.
"This ruling is a major affirmation that the rights we enjoy in the physical world continue to apply in the digital world," said Greg Nojeim, director of CDT's Freedom, Security, and Technology Project. "By declaring that a U.S. warrant cannot reach communications content stored abroad, the court ruled strongly in favor of privacy and national rule of law."
"Had the Department of Justice prevailed in this case," Nojeim continued, "other countries would follow the U.S. lead and start claiming access to data stored here in the U.S. based on their own laws. It would have been like the Wild West and disaster for privacy."
The appeals court rule may not be the end of the road. CNNMoney reports that "because of the significant implications about privacy and the limitations put on American law enforcement, it's a case that could make its way to the Supreme Court."
In what is being heralded as a win for privacy, a federal appeals court on Thursday ruled that Microsoft does not have to hand over to the U.S. government customer data held in another country.
According to Wired's senior writer Andy Greenberg, the ruling (pdf) by the 2nd U.S. Circuit Court of Appeals in Manhattan "just sent the American Justice Department a clear message about its ability to reach beyond U.S. borders to collect data with a search warrant: Keep your hands to yourself."
In its own statement welcoming the ruling, Microsoft calls it an "important decision for people everywhere."
"The decision is important for three reasons: it ensures that people's privacy rights are protected by the laws of their own countries; it helps ensure that the legal protections of the physical world apply in the digital domain; and it paves the way for better solutions to address both privacy and law enforcement needs," the statement adds.
TechDirt's Mike Masnick, meanwhile, writes that it "is a hugely important case concerning the privacy and security of our data."
Reuters summarizes the case thusly: "Microsoft had been challenging a warrant seeking emails stored on a server in Dublin, Ireland, in a narcotics case."
The Center for Democracy & Technology (CDT), which had filed an amicus brief in support of Microsoft in the case, has a backgrounder which explains the details more fully. It states, in part:
The animating question in this case is whether a U.S. law enforcement agency can compel a U.S. provider of communications service to disclose the content of digital information the provider stores outside the U.S. The Stored Communications Act (SCA), part of the Electronic Communications Privacy Act (ECPA) of 1986, does not explicitly address the issue. The SCA authorizes the Government to seek the contents of stored communications that are more than 180 days old, using a subpoena, a court order issued under 18 USC 2703(d), or a warrant. The Government takes the position that a subpoena can also compel disclosure of opened email no matter its age. However, Microsoft and most other large providers apply U.S. v. Warshak, 631 F.3d 266 (6th Cir. 2010) on a nationwide basis, and require warrants for all content. As a result, the stakes about resolution of this case are quite high: does a U.S. provider put content out of the reach of the U.S. government acting under the SCA by storing the data abroad?
The judges sided with Microsoft, writing in their decision:
We conclude that Congress did not intend the SCA's warrant provisions to apply extraterritorially. The focus of those provisions is protection of a user's privacy interests. Accordingly, the SCA does not authorize a U.S. court to issue and enforce an SCA warrant against a United States-based service provider for the contents of a customer's electronic communications stored on servers located outside the United States. The SCA warrant in this case may not lawfully be used to compel Microsoft to produce to the government the contents of a customer's e-mail account stored exclusively in Ireland. Because Microsoft has otherwise complied with the Warrant, it has no remaining lawful obligation to produce materials to the government.
"This ruling is a major affirmation that the rights we enjoy in the physical world continue to apply in the digital world," said Greg Nojeim, director of CDT's Freedom, Security, and Technology Project. "By declaring that a U.S. warrant cannot reach communications content stored abroad, the court ruled strongly in favor of privacy and national rule of law."
"Had the Department of Justice prevailed in this case," Nojeim continued, "other countries would follow the U.S. lead and start claiming access to data stored here in the U.S. based on their own laws. It would have been like the Wild West and disaster for privacy."
The appeals court rule may not be the end of the road. CNNMoney reports that "because of the significant implications about privacy and the limitations put on American law enforcement, it's a case that could make its way to the Supreme Court."