WIEDER AND GUARNIERI v. THE UNITED KINGDOM JUDGMENT
43. Microsoft produced the customer’s non-content information to the
Government as directed. Those data were stored in the United States.
However, Microsoft ascertained that, to comply fully with the warrant, it
would need to access customer content that it stored and maintained in Ireland
and to import those data into the United States for delivery to federal
authorities. It declined to do so. Instead, it moved to quash the warrant.
44. The Magistrate Judge denied Microsoft’s motion, resting on the legal
conclusion that the warrant in question was more akin to a subpoena than a
warrant, and that a properly served subpoena would compel production of
any material, including customer content, so long as it was stored at premises
owned, maintained, controlled, or operated by Microsoft Corporation. The
District Court, after a hearing, adopted the Magistrate Judge’s reasoning and
affirmed his ruling (see In re Warrant To Search a Certain E-Mail Account
Controlled and Maintained by Microsoft Corp., 15 F.Supp.3d 466 (SDNY
2014)). Shortly after, the District Court held Microsoft in civil contempt for
refusing to comply fully with the warrant.
45. A panel of the Court of Appeals for the Second Circuit reversed the
denial of the motion to quash and vacated the civil contempt finding (see In
re Warrant To Search a Certain E-Mail Account Controlled and Maintained
by Microsoft Corp., 829 F. 3d 197, 204– 205 (CA2 2016)). It said the
following:
“For the reasons that follow, we think that Microsoft has the better of the argument.
When, in 1986, Congress passed the Stored Communications Act as part of the broader
Electronic Communications Privacy Act, its aim was to protect user privacy in the
context of new technology that required a user’s interaction with a service provider.
Neither explicitly nor implicitly does the statute envision the application of its warrant
provisions overseas. Three decades ago, international boundaries were not so routinely
crossed as they are today, when service providers rely on worldwide networks of
hardware to satisfy users’ 21st–century demands for access and speed and their related,
evolving expectations of privacy.”
46. It continued:
“The information sought in this case is the content of the electronic communications
of a Microsoft customer. The content to be seized is stored in Dublin. The record is
silent regarding the citizenship and location of the customer. Although the Act’s focus
on the customer’s privacy might suggest that the customer’s actual location or
citizenship would be important to the extraterritoriality analysis, it is our view that the
invasion of the customer’s privacy takes place under the SCA [Stored Communications
Act] where the customer’s protected content is accessed—here, where it is seized by
Microsoft, acting as an agent of the government. Because the content subject to the
Warrant is located in, and would be seized from, the Dublin data center, the conduct
that falls within the focus of the SCA would occur outside the United States, regardless
of the customer’s location and regardless of Microsoft’s home in the United States.
(...).”
47. On 23 March 2018, before the case was considered by the Supreme
Court, the Clarifying Lawful Overseas Use of Data Act (CLOUD Act) was
15
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents