A federal appeals court Thursday said prosecutors cannot force U.S. companies like Microsoft to turn over customer emails and other data stored on servers overseas — a ruling the government suggested could hamper national security investigations.
The three-judge panel of the 2nd U.S. Circuit Court of Appeals unanimously overturned a lower court's contempt finding against Microsoft for not handing over a customer's emails stored in Ireland. Federal prosecutors wanted the material for use in a drug trafficking investigation.
The ruling in the closely watched case was a victory for high-tech companies in the burgeoning "cloud computing" business, in which data is kept not on personal computers but on giant and sometimes distant servers. Microsoft stores data from over 1 billion customers and over 20 million businesses on servers in over 40 countries, the court noted.
The court said prosecutors went beyond what Congress intended when it passed the Stored Communications Act in 1986.
"Neither explicitly nor implicitly does the statute envision the application of its warrant provisions overseas," the court said in a decision written by Circuit Judge Susan L. Carney. She said allowing prosecutors to enforce a warrant outside the U.S. would "jettison ... centuries of law" and "replace the traditional warrant with a novel instrument of international application."
In a concurring opinion, Circuit Judge Gerard E. Lynch said an attempt to apply U.S. law overseas could cause tensions with other countries, "most easily appreciated if we consider the likely American reaction if France or Ireland or Saudi Arabia or Russia proclaimed its right to regulate conduct by Americans within our borders."
Microsoft called the ruling a "major victory for the protection of people's privacy rights under their own laws rather than the reach of foreign governments."
"We hear from customers around the world that they want the traditional privacy protections they've enjoyed for information stored on paper to remain in place as data moves to the cloud," said Brad Smith, Microsoft president and chief legal officer. "Today's decision helps ensure this result."
The Justice Department said it was disappointed and considering its options.