Follow Us

We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message

Search warrants extend to emails stored overseas, US judge rules in Microsoft case

Microsoft said it will continue to fight the ruling as part of its data privacy commitments to its customers

Article comments

Email providers have to turn over a user's emails and other data to U.S. law enforcement when issued a search warrant, even if the data is stored overseas, a U.S. judge ruled Friday.

Microsoft must hand over a user's emails stored on a server in Dublin, Ireland, ruled magistrate judge James Francis of the U.S. District Court of the Southern District of New York.

In December, Francis authorized the search and seizure of the contents of all emails, records and other information regarding the identification of one of Microsoft's webmail users.

While Microsoft's Global Criminal Compliance (GCC) team turned over so-called non-content information stored on U.S. servers, such as the user's name and country as well as address book information, it refused to hand over the contents of the emails because they were stored on a server in another country. For this reason the company sought to quash the search warrant, arguing that U.S. courts are not authorized to issue warrants for extraterritorial search and seizure of emails.

Judge Francis, however, disagreed and denied Microsoft's motion to quash the verdict.

"Microsoft's argument is simple, perhaps deceptively so," Francis said in his ruling.

If the warrant had been a conventional search warrant Microsoft could have been right since there are territorial restrictions on those warrants, Francis said.

However, a search warrant on electronic communications is not conventional but rather a hybrid: part search warrant and part subpoena, he said.

"It is executed like a subpoena in that it is served on the ISP in possession of the information and does not involve government agents entering the premises of the ISP to search its servers and seize the email account in question," he said.

If the territorial restrictions applied it would be very easy for criminals to evade such search warrants, Francis said.

Service providers are not obliged to verify information provided by a new user when an account is created, he said. Since Microsoft assigns each newly registered account to the closest datacenter based on the country code that the user enters at registration, warrants could be evaded by simply giving false residence information causing the ISP to assign an account to a server outside the U.S., he said.

Moreover, if treated like a conventional warrant, "the burden on the government would be substantial, and law enforcement efforts would be seriously impeded," Francis said. To obtain the contents of emails stored abroad, U.S. law enforcement would have to comply with treaties that require the cooperation of two governments. Such requests could be time consuming or even denied, Francis said, adding that the U.S. does not have such treaties with all countries.

Microsoft disagrees with the decision, said David Howard, Corporate Vice President & Deputy General Counsel at Microsoft in a blog post

While the law is complicated, the issue is straightforward, he said: "It's generally accepted that a U.S. search warrant in the physical world can only be used to obtain materials that are within the territory of the United States," he said, adding that therefore, the U.S. government should not have the power to search the content of email stored overseas.

This procedure is just a start though. "When we filed this challenge we knew the path would need to start with a magistrate judge, and that we'd eventually have the opportunity to bring the issue to a U.S. district court judge and probably to a federal court of appeals," Howard said.

"We'll continue to pursue this issue because we believe we're right on the law and because our customers have told us they value our privacy commitments," he said.  

Loek is Amsterdam Correspondent and covers online privacy, intellectual property, open-source and online payment issues for the IDG News Service. Follow him on Twitter at @loekessers or email tips and comments to loek_essers@idg.com



Share:

More from Techworld

More relevant IT news

Comments



Send to a friend

Email this article to a friend or colleague:

PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Choose – and Choose Wisely – the Right MSP for Your SMB

End users need a technology partner that provides transparency, enables productivity, delivers...

Download Whitepaper

10 Effective Habits of Indispensable IT Departments

It’s no secret that responsibilities are growing while budgets continue to shrink. Download this...

Download Whitepaper

Gartner Magic Quadrant for Enterprise Information Archiving

Enterprise information archiving is contributing to organisational needs for e-discovery and...

Download Whitepaper

Advancing the state of virtualised backups

Dell Software’s vRanger is a veteran of the virtualisation specific backup market. It was the...

Download Whitepaper

Techworld UK - Technology - Business

Innovation, productivity, agility and profit

Watch this on demand webinar which explores IT innovation, managed print services and business agility.

Techworld Mobile Site

Access Techworld's content on the move

Get the latest news, product reviews and downloads on your mobile device with Techworld's mobile site.

Find out more...

From Wow to How : Making mobile and cloud work for you

On demand Biztech Briefing - Learn how to effectively deliver mobile work styles and cloud services together.

Watch now...

Site Map

* *