{"id":479,"date":"2018-04-10T20:45:02","date_gmt":"2018-04-10T20:45:02","guid":{"rendered":"http:\/\/ielrblog.com\/?p=479"},"modified":"2018-04-10T20:45:02","modified_gmt":"2018-04-10T20:45:02","slug":"the-cloud-act-arguments-for-and-against","status":"publish","type":"post","link":"https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/","title":{"rendered":"The CLOUD Act: Arguments For and Against \u00a0"},"content":{"rendered":"<p>The DOJ and Microsoft have both filed motions to dismiss as moot the seminal data privacy case before the Supreme Court this term, <em>United States v. Microsoft Corp. <\/em><a href=\"https:\/\/ielrblog.com\/index.php\/2017\/10\/18\/justice-department-microsoft-set-square-off-supreme-court-landmark-data-privacy-case\/\">At issue<\/a> in the case is whether the warrant provisions of the Stored Communications Act (SCA) apply extraterritorially, such that they compel Microsoft, an electronic service provider to produce private electronic communications stored on servers in Ireland for the United States government.<\/p>\n<p>In their respective motions, the two parties agree that there was no longer a \u201clive case or controversy\u201d with respect to the question presented, due to a piece of recently-enacted legislation called the Clarifying Lawful Overseas Use of Data Act (CLOUD Act). Congress attached the bipartisan legislation to an omnibus spending bill, and it was signed into law on March 23, 2018. The act states as follows:<\/p>\n<p>\u201cA provider of electronic communication service or remote computing service shall comply with the obligations of this chapter to preserve, backup, or disclose the contents of a wire or electronic communication and any record or other information pertaining to a customer or subscriber within such provider\u2019s possession, custody, or control, regardless of whether such communication, record, or other information is located within or outside of the United States.\u201d<\/p>\n<p>The CLOUD Act also includes provisions governing foreign governments\u2019 access to U.S.-held data. Human rights and privacy organizations have opposed this part of the act the most. The CLOUD Act authorizes the president to enter into reciprocal data-sharing \u201cexecutive agreements\u201d with foreign governments. Human rights and privacy organizations like the ACLU, EFF and Amnesty International have denounced the executive agreement mechanism for giving unfettered access to U.S.-held data to foreign governments.<\/p>\n<p>It is worth noting, however, that the act puts forth significant requirements that foreign governments must meet in order to be considered a \u201cqualifying foreign government\u201d under the CLOUD Act. Among other requirements, the government in question must:<\/p>\n<ul>\n<li>Have domestic law that \u201caffords robust substantive and procedural protections for privacy and civil liberties in light of the data collection and activities of the foreign government that will be subject to the agreement;\u201d and<\/li>\n<li>Have instituted \u201cappropriate procedures to minimize the acquisition, retention, and dissemination of information concerning United States persons subject to the agreement;\u201d as well as that;<\/li>\n<li>The government adopts procedures that guard against targeting, either direct or indirect, of a U.S. citizen or person located in the United States.<\/li>\n<\/ul>\n<p>Furthermore, the act specifies further criteria for what constitutes a qualifying order for the disclosure of U.S.-held data to a foreign government.\u00a0 In particular, the order must:<\/p>\n<ul>\n<li>Be for the purpose of \u201cobtaining information relating to the prevention, detection, investigation, or prosecution of serious crime, including terrorism;\u201d<\/li>\n<li>Identify a \u201cspecific person\u201d or other \u201cspecific identifier\u201d as the object of the order;<\/li>\n<li>Comply with the requesting country\u2019s domestic law;<\/li>\n<li>Be subject to independent oversight by a judge, court, magistrate, or other legal authority; among other qualifications.<\/li>\n<\/ul>\n<p>One of the best dialogues on the act unfolded in a series of response essays on <em>Lawfare. <\/em><\/p>\n<p>Jennifer Daskal and Peter Swire argued in an initial <a href=\"https:\/\/lawfareblog.com\/why-cloud-act-good-privacy-and-human-rights\">essay<\/a> posted on <em>Lawfare <\/em>that the CLOUD Act will enhance, rather than dilute, privacy and human rights protections on balance. They note that the status quo for requesting evidentiary data across borders \u2013 the MLAT process \u2013 is a cumbersome diplomatic channel ill-equipped for \u00a0the sheer number of crossborder data requests currently in the system. As a result, countries are growing more and more frustrated with the MLAT process, which they view as not only cumbersome, but \u201cimperialistic,\u201d since it often requires getting a warrant from a U.S- based judge even if the data requested concerns a local criminal investigation.<\/p>\n<p>Countries are thus turning to alternative measures to bypass the MLAT system, such as data localization laws that require that data be stored within the country. Data localization laws have been accused by critics of veiling anti-democratic motivations on the part of the instituting government \u2013 such as allowing for closer surveillance and identification of the local political dissidents. Furthermore, data localization laws lead to data decentralization, which in turn leads to multiple points of vulnerability in data providers\u2019 security and privacy infrastructure.<\/p>\n<p>Daskal and Swire also note that the CLOUD Act subjects foreign governments to regular compliance reviews by U.S. officials, which they praise as a novel opportunity for the U.S. to monitor how foreign governments use the data and guard against abuse.<\/p>\n<p>Neema Singh Guliani from the ACLU and Naureen Shah from Amnesty International argue in a <a href=\"https:\/\/lawfareblog.com\/cloud-act-doesnt-help-privacy-and-human-rights-it-hurts-them\">response essay<\/a> that the CLOUD Act puts the privacy and security of individuals, particularly human rights activists at risk. \u201cThe very premise of the current CLOUD Act,\u201d they write, \u201cthe idea that countries can effectively be safe-listed as human-rights compliant, such that their individual data requests need no further human rights vetting\u2014is wrong.\u201d Guliani and Shah argue that the CLOUD Act has inadequate safeguards for wide range of scenarios, such as when a country experiences a \u201crapid deterioration in human rights,\u201d like Turkey did in mid-2016 following a coup attempt.<\/p>\n<p>For the IELR Blog\u2019s past coverage of the <em>U.S. v Microsoft<\/em> case, see <a href=\"https:\/\/ielrblog.com\/?s=us+v+microsoft\">here<\/a>. For the full text of the Cloud Act, see <a href=\"https:\/\/www.congress.gov\/bill\/115th-congress\/house-bill\/4943\/text\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The DOJ and Microsoft have both filed motions to dismiss as moot the seminal data privacy case before the Supreme Court this term, United States v. Microsoft Corp. At issue in the case is whether the warrant provisions of the Stored Communications Act (SCA) apply extraterritorially, such that they compel Microsoft, an electronic service provider [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[1],"tags":[],"class_list":{"0":"post-479","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-uncategorized","7":"entry"},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>The CLOUD Act: Arguments For and Against \u00a0 | IELR Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The CLOUD Act: Arguments For and Against \u00a0 | IELR Blog\" \/>\n<meta property=\"og:description\" content=\"The DOJ and Microsoft have both filed motions to dismiss as moot the seminal data privacy case before the Supreme Court this term, United States v. Microsoft Corp. At issue in the case is whether the warrant provisions of the Stored Communications Act (SCA) apply extraterritorially, such that they compel Microsoft, an electronic service provider [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/\" \/>\n<meta property=\"og:site_name\" content=\"IELR Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/m.facebook.com\/intlenforcementlawreporter\/?ref=bookmarks\" \/>\n<meta property=\"article:published_time\" content=\"2018-04-10T20:45:02+00:00\" \/>\n<meta name=\"author\" content=\"Zarine Kharazian\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ielr\" \/>\n<meta name=\"twitter:site\" content=\"@ielr\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Zarine Kharazian\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/ielrblog.com\\\/index.php\\\/2018\\\/04\\\/10\\\/the-cloud-act-arguments-for-and-against\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ielrblog.com\\\/index.php\\\/2018\\\/04\\\/10\\\/the-cloud-act-arguments-for-and-against\\\/\"},\"author\":{\"name\":\"Zarine Kharazian\",\"@id\":\"https:\\\/\\\/ielrblog.com\\\/#\\\/schema\\\/person\\\/d97d5908cb441bbcaed11eaad074b544\"},\"headline\":\"The CLOUD Act: Arguments For and Against \u00a0\",\"datePublished\":\"2018-04-10T20:45:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/ielrblog.com\\\/index.php\\\/2018\\\/04\\\/10\\\/the-cloud-act-arguments-for-and-against\\\/\"},\"wordCount\":878,\"commentCount\":0,\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/ielrblog.com\\\/index.php\\\/2018\\\/04\\\/10\\\/the-cloud-act-arguments-for-and-against\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/ielrblog.com\\\/index.php\\\/2018\\\/04\\\/10\\\/the-cloud-act-arguments-for-and-against\\\/\",\"url\":\"https:\\\/\\\/ielrblog.com\\\/index.php\\\/2018\\\/04\\\/10\\\/the-cloud-act-arguments-for-and-against\\\/\",\"name\":\"The CLOUD Act: Arguments For and Against \u00a0 | IELR Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ielrblog.com\\\/#website\"},\"datePublished\":\"2018-04-10T20:45:02+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/ielrblog.com\\\/#\\\/schema\\\/person\\\/d97d5908cb441bbcaed11eaad074b544\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/ielrblog.com\\\/index.php\\\/2018\\\/04\\\/10\\\/the-cloud-act-arguments-for-and-against\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/ielrblog.com\\\/index.php\\\/2018\\\/04\\\/10\\\/the-cloud-act-arguments-for-and-against\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/ielrblog.com\\\/index.php\\\/2018\\\/04\\\/10\\\/the-cloud-act-arguments-for-and-against\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/ielrblog.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The CLOUD Act: Arguments For and Against \u00a0\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/ielrblog.com\\\/#website\",\"url\":\"https:\\\/\\\/ielrblog.com\\\/\",\"name\":\"IELR Blog\",\"description\":\"Official Blog of the International Enforcement Law Reporter\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/ielrblog.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/ielrblog.com\\\/#\\\/schema\\\/person\\\/d97d5908cb441bbcaed11eaad074b544\",\"name\":\"Zarine Kharazian\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ed80380bc8641773fc0a6e8c5dbfbcea53b521d2cddf4cd8e38d085691ea0a4d?s=96&d=monsterid&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ed80380bc8641773fc0a6e8c5dbfbcea53b521d2cddf4cd8e38d085691ea0a4d?s=96&d=monsterid&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ed80380bc8641773fc0a6e8c5dbfbcea53b521d2cddf4cd8e38d085691ea0a4d?s=96&d=monsterid&r=g\",\"caption\":\"Zarine Kharazian\"},\"url\":\"https:\\\/\\\/ielrblog.com\\\/index.php\\\/author\\\/zarine-kharazian\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The CLOUD Act: Arguments For and Against \u00a0 | IELR Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/","og_locale":"en_US","og_type":"article","og_title":"The CLOUD Act: Arguments For and Against \u00a0 | IELR Blog","og_description":"The DOJ and Microsoft have both filed motions to dismiss as moot the seminal data privacy case before the Supreme Court this term, United States v. Microsoft Corp. At issue in the case is whether the warrant provisions of the Stored Communications Act (SCA) apply extraterritorially, such that they compel Microsoft, an electronic service provider [&hellip;]","og_url":"https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/","og_site_name":"IELR Blog","article_publisher":"https:\/\/m.facebook.com\/intlenforcementlawreporter\/?ref=bookmarks","article_published_time":"2018-04-10T20:45:02+00:00","author":"Zarine Kharazian","twitter_card":"summary_large_image","twitter_creator":"@ielr","twitter_site":"@ielr","twitter_misc":{"Written by":"Zarine Kharazian","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/#article","isPartOf":{"@id":"https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/"},"author":{"name":"Zarine Kharazian","@id":"https:\/\/ielrblog.com\/#\/schema\/person\/d97d5908cb441bbcaed11eaad074b544"},"headline":"The CLOUD Act: Arguments For and Against \u00a0","datePublished":"2018-04-10T20:45:02+00:00","mainEntityOfPage":{"@id":"https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/"},"wordCount":878,"commentCount":0,"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/","url":"https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/","name":"The CLOUD Act: Arguments For and Against \u00a0 | IELR Blog","isPartOf":{"@id":"https:\/\/ielrblog.com\/#website"},"datePublished":"2018-04-10T20:45:02+00:00","author":{"@id":"https:\/\/ielrblog.com\/#\/schema\/person\/d97d5908cb441bbcaed11eaad074b544"},"breadcrumb":{"@id":"https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ielrblog.com\/index.php\/2018\/04\/10\/the-cloud-act-arguments-for-and-against\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ielrblog.com\/"},{"@type":"ListItem","position":2,"name":"The CLOUD Act: Arguments For and Against \u00a0"}]},{"@type":"WebSite","@id":"https:\/\/ielrblog.com\/#website","url":"https:\/\/ielrblog.com\/","name":"IELR Blog","description":"Official Blog of the International Enforcement Law Reporter","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ielrblog.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/ielrblog.com\/#\/schema\/person\/d97d5908cb441bbcaed11eaad074b544","name":"Zarine Kharazian","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/ed80380bc8641773fc0a6e8c5dbfbcea53b521d2cddf4cd8e38d085691ea0a4d?s=96&d=monsterid&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/ed80380bc8641773fc0a6e8c5dbfbcea53b521d2cddf4cd8e38d085691ea0a4d?s=96&d=monsterid&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ed80380bc8641773fc0a6e8c5dbfbcea53b521d2cddf4cd8e38d085691ea0a4d?s=96&d=monsterid&r=g","caption":"Zarine Kharazian"},"url":"https:\/\/ielrblog.com\/index.php\/author\/zarine-kharazian\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pas6ng-7J","jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/ielrblog.com\/index.php\/wp-json\/wp\/v2\/posts\/479","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ielrblog.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ielrblog.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ielrblog.com\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/ielrblog.com\/index.php\/wp-json\/wp\/v2\/comments?post=479"}],"version-history":[{"count":1,"href":"https:\/\/ielrblog.com\/index.php\/wp-json\/wp\/v2\/posts\/479\/revisions"}],"predecessor-version":[{"id":480,"href":"https:\/\/ielrblog.com\/index.php\/wp-json\/wp\/v2\/posts\/479\/revisions\/480"}],"wp:attachment":[{"href":"https:\/\/ielrblog.com\/index.php\/wp-json\/wp\/v2\/media?parent=479"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ielrblog.com\/index.php\/wp-json\/wp\/v2\/categories?post=479"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ielrblog.com\/index.php\/wp-json\/wp\/v2\/tags?post=479"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}