Slashdot Mirror


Proposed Law Would Limit US Search Warrants For Data Stored Abroad

An anonymous reader writes On Thursday, a bipartisan law was introduced in the Senate that would limit US law enforcement's ability to obtain user data from US companies with servers physically located abroad. Law enforcement would still be able to gain access to those servers with a US warrant, but the warrant would be limited to data belonging to US citizens. This bill, called the LEADS Act (PDF), addresses concerns by the likes of Microsoft and other tech giants that worry about the impact law enforcement over-reach will have on their global businesses. Critics remain skeptical: "we are concerned about how the provision authorizing long-arm warrants for the accounts of US persons would be administered, and whether we could reasonably expect reciprocity from other nations on such an approach."

14 of 131 comments (clear)

  1. Oh baby by fustakrakich · · Score: 4, Insightful

    Don't you just love the smell of electioneering in the morning?

    Just another toothless regulation to be watered down in the run up to November.

    --
    “He’s not deformed, he’s just drunk!”
  2. Black letter law by jbolden · · Score: 4, Informative

    Well certainly anything that moves this from precedent and complexities of corporations winging it to black letter law would be a net gain. The role of search warrants and how to handle international issues should be between the USA government and the EU. Tech companies should just be following the law. I think everyone agrees the stored communication act (1986) needs updating

    Now a few points:

    Europeans keep citing European laws Microsoft's council has not been able to show that there was any Irish law in conflict with the previous warrants: Second, while many media reports have claimed that the decision was contrary to foreign privacy laws protecting the requested emails, it was clear from the transcript that Microsoft never raised such a conflict of law. (“Microsoft . . . has not been able to point to any specific provision of Irish law that in any way forbids it from handing the data over.”) Some commentators claimed that the data must be subject to foreign privacy protections because Ireland is part of the European Union, and thus the data must be subject to the European Data Protection Directive. However, what they failed to appreciate is that the European Data Protection Directive, by itself, is not legally binding. It needs to be ratified as national law by each member state. As a result, there are variations across the member states as to what is allowed and what is prohibited. Accordingly, the impact of an actual conflict of law on future warrants remains undecided.

    Moreover the issue was always that USA people had control of the data: because Microsoft could access and retrieve the requested documents from a terminal within the United States, even though the actual search and retrieval would occur abroad, the data was still under Microsoft’s control in the United States, and thus properly subject to the SCA warrant.

    1. Re:Black letter law by mrbester · · Score: 2

      Ireland *has* ratified it, as part of being in EU and implementing directives. The absolute minimum that can be implemented is that it is illegal for data belonging to EU nationals to leave EU without the *owner's* permission. Everything else is window dressing.

      Written into the Act (2003) is the get-out clause (section 8), where data can leave without permission (say for US subpoena purposes). However, this is not a carte blanche instant compliance thing and requires the owner be informed as to the transfer with a maximum of 40 days before it can occur to allow an appeal against it. Failure to do so is the illegal act.

      --
      "Wait. Something's happening. It's opening up! My God, it's full of apricots!"
    2. Re:Black letter law by Charliemopps · · Score: 3, Interesting

      What's the upside? Doesn't this just make it easier for multinational corporations and criminal organizations to evade enforcement of US laws?

      Law enforcement is enforcing US laws in foreign countries. That's the problem.

      Lets put the show on the other foot for an example: While visiting Russia, the Russian officials accuse you of viewing homosexual porn, which is illegal there. They then issue a search warrant and force microsoft and google to turn over the contents of your cloud drive/phone backups, etc... Does that sound reasonable to you?

  3. what's the point? by silfen · · Score: 4, Insightful

    Instead of weird exceptions like this, which are likely to cause only further problems, the US should reduce the intrusiveness of law enforcement in general. Stop the war on drugs, simplify the tax code, consistently require court warrants for searches, etc., and we could reduce online searches by 90%

    1. Re:what's the point? by Charliemopps · · Score: 4, Insightful

      Instead of weird exceptions like this, which are likely to cause only further problems, the US should reduce the intrusiveness of law enforcement in general. Stop the war on drugs, simplify the tax code, consistently require court warrants for searches, etc., and we could reduce online searches by 90%

      The complexity serves a purpose. The tax code is the easiest example. Do you have any idea how much you pay in taxes? Any clue at all? Income tax, property tax, sales tax, Gas tax, vice tax, drivers license fees, etc... etc...

      After all that you likely have no idea what you pay in taxes. Which is exactly the point.

      The same goes for laws and regulation. It's often joked that everything's illegal in the United states, but that's not just a joke. If law enforcement wants to get you, they get you. You are always breaking the law in one way or another. Everyone thought it was clever when they nailed Al Capone for the tax evasion nonsense. But now that the same tactics are used on pretty much everyone, the true injustice of it all has become rather apparent.

      We have a problem with law enforcement in this country. It's turned into us against them. And "Them" now have Tanks and machine guns.

  4. Re:Citizens affected but not Companies?! by WWJohnBrowningDo · · Score: 3, Informative

    The submitter added that on their own. The bill applies to all US persons, i.e., all citizens, permanent residents, and corporate entities.

    From the actual text of the bill:

    The term ‘United States person’ means a citizen or permanent resident alien of the United States, or an entity or organization organized under the laws of the United States or a State or political subdivision thereof.’

    The word "citizen" doesn't even occur in the article.

  5. Re:Citizens affected but not Companies?! by NicBenjamin · · Score: 3, Informative

    You're reading it wrong.

    Currently the US Government can get a warrant for anyone's data, and US-Based companies must comply or the Courts will seriously fuck them over. The NSA actually has warrants issued by the FISA Court covering all non-US Citizens (yes, I know lots of people thing the warrant is BS, but the simple fact is the Courts disagree with you, and in the US being right when the Courts are wrong doesn't get you jack-squat. Just ask Dredd Scott). Which means that if you're a German, and you're concerned about the NSA, you probably ain't gonna use Yahoo for jack-shit.

    This rule would make it impossible for the Courts to order Yahoo to turn over data on that German, as long as the data is stored on Yahoo servers outside the US.

    I'm kind of curious as to how this is supposed to work legally. The Fourth Amendment is controlling in the granting of warrants, and it only includes roles for the Executive (asking for a warrant) and the Judicial (granting the warrant). If Obama has probable cause that Yahoo used timd977 is shipping Heroin in from Russia, then the Courts are gonna grant the warrant. Then when Yahoo says "Fuck you, we've got this statute," it's totally irrelevant. The Warrant is valid under the Fourth Amendment,which means Yahoo is by definition in contempt of Court if it refuses to hand the government the data.

    I'm not a lawyer, or a specialist in criminal law, so it's possible the Courts have to look at statutes governing probable cause before granting warrants, or can't hold people in contempt unless a statute specifically gives them permission, or something like that. But it just seems to me that if the US Constitution's Separation of Powers mean anything it's that a) Congress can't just pass a law saying the Executive Branch has fewer powers then it is granted by the Constitution, and b) no statute can stop the Courts from penalizing people who disobey them.

  6. The horses are back from the taxidemist. by pupsocket · · Score: 4, Informative

    This bill is supposed to persuade foreigners that the United States does not gather data on them, because they aren't included in the warrants.

    Well, the NSA and the CIA and other like agencies don't need warrants to gather information abroad, so this law is just a fuzzy stuffed toy to provide false comfort.

    What are the Germans going to think? "Oh, what a relief, I am secure knowing that the United States of America spies only on its own citizens."

    This bill clarifies that an American corporation colluding in surveillance of foreigners does so with the latitude and secrecy of an intelligence agent.

    Meanwhile, it affirms the US Government's power to ensure that the people are not secure from unreasonable searches.

  7. Re: Citizens affected but not Companies?! by PPH · · Score: 4, Informative

    Each statue defines 'US Person' differently. Some are far reaching and define it to be anyone resident or doing business in the USA. Others have a more restricted definition. For the purpose of ITAR, for example, you can become a non US Person simply by being an employee of a foreign company. Even if you are a US citizen and reside within the USA.

    Simple explaination: You need to ask a lawyer.

    --
    Have gnu, will travel.
  8. the 4th says what they CAN'T do by raymorris · · Score: 2

    The fourth amendment, and the rest of the bill of rights, lists things the government shall not do.
    Separately, the enumerated powers clause lists what they are allowed to do, and says they may not do anything else oter than what is listed - all other powers are reserved to the states and the people, the Constitution says.

    Nothing in the Bill of Rights or anywhere else in the Constitution gives the executive the right to perform searches, except that Congress has legislative power (limited to the enumerated powers) . It's Congress that grants the executive search power, by passing a law saying they can search _____ when _____. The fourth LIMITS that, saying Congress may not allow unreasonable searches. The Constitution does NOT say that all reasonable searches are allowed.

    1. Re:the 4th says what they CAN'T do by NicBenjamin · · Score: 2

      Talk about ridiculous pro-American propaganda. The entire point of the Constitution is to restrict your rights by creating another level of government that can arrest your ass. That's all the preamble talks about. The specific powers you're speaking of are "search and seizure," and they aren't explicitly mentioned because it would be stupid to create a government that could ban counterfeit coinage, but could not a) search the places of business of suspected counterfeiters, b) seize counterfeit money, and c) arrest said counterfeiters. The Courts tend to frown on any lawyer whose entire argument is "clearly the founders were fucking idiots who didn't realize they needed to include a clause letting them arrest people." The Bill of Rights protects your freedom, but it only does so because it limits the actions of an entire level of government that simply did not exist in 1788.

      Moreover please learn logic. If your country specifically has to pass an Amendment to restrict "unreasonable searches and seizures" that means that a) reasonable searches and seizures are perfectly ok even after the Amendment is law, and b) that the government had the power to make unreasonable ones before.

  9. Encrypt, encrypt, encrypt... by flyingfsck · · Score: 4, Informative

    Encrypt everything you can, always, everywhere. Even bad encryption will slow the spies down and increase their costs.

    --
    Excuse me, but please get off my Pennisetum Clandestinum, eh!
  10. Re: Citizens affected but not Companies?! by davester666 · · Score: 2

    It varies.

    If the law states you must be a citizen for it to apply to you, then if they can't trivially make a determination whether 'X' is owned/controlled/related to a citizen, it is assumed the law applies because you might be a citizen.

    If the law states you must not be a citizen for it to apply to you, then if they can't trivially make a determination whether 'X' is owned/controlled/related to a citizen, it is assumed the law applies because you might not be a citizen.

    --
    Sleep your way to a whiter smile...date a dentist!