A US attempt to force Microsoft to hand over emails held on servers in Ireland has drawn a strong rebuke from Brussels in one of the first tests of cross-border privacy raised by cloud computing.
The US demand could contravene international law and should have been handled through the official channels normally used for law enforcement between regions, according to Viviane Reding, vice-president of the European Commission.
The case comes as US technology is already caught up in a transatlantic privacy dispute over revelations about widespread US internet surveillance.
The demand for information held in a different location from the people it relates to could “hurt the competitiveness of US cloud providers in general”, Microsoft warned in a lawsuit challenging the order this year.
It added: “Microsoft and US technology companies have faced growing mistrust and concern about their ability to protect the privacy of personal information located outside the US.”
A magistrate in New York issued a search warrant late last year requiring Microsoft to give emails belonging to a user of its Outlook email service to US law enforcement agencies.
The nature of the case and identity of the suspect were not disclosed.
EU support
Microsoft’s claim that the US enforcement order amounted to an illegal attempt to enforce a warrant beyond US borders has won support in Europe, with Ms Reding weighing in on Microsoft’s side.
“The commission’s concern is that the extraterritorial application of foreign laws [and orders to companies based thereon] may be in breach of international law,” she wrote last week in a letter to Sophie in’t Veld, a Dutch member of the European Parliament.
She added that the US “may impede the attainment of the protection of individuals guaranteed” in the EU.
Rather than trying to force Microsoft to surrender information, she said the US should have relied on the mutual legal assistance treaties that create a framework for co-operation between law enforcement agencies.
Ms Reding’s rebuke came in the same week that the US supreme court put new limits on the power of law enforcement agencies to search suspects’ mobile devices.
The judges ruled unanimously that searches could not be carried out without a warrant. – (Copyright The Financial Times Limited 2014)
