Microsoft's decision to take on the U.S. government's habit of stamping "Secret" on court orders demanding data stored on the company's servers was largely motivated by business concerns, a legal expert said Thursday.
The Redmond, Wash. firm also implied that business reasons drove it to ask that a section of a 1986 law be declared unconstitutional.
"The government's secrecy orders forbid cloud service providers from letting businesses know that the government has obtained their data," said Brad Smith, Microsoft's chief legal officer, in a post to a company blog on Thursday. "Not surprisingly, business customers regularly convey to us their strong desire to know when the government is obtaining their data. And not surprisingly, they want the opportunity for their own lawyers to review the situation and help decide whether to turn over information or contest the issue in court."
In too many instances, that's not possible, Microsoft argued Thursday when it sued the U.S. Department of Justice (DOJ) and Attorney General Loretta Lynch.
The lawsuit asked for a judgment declaring unconstitutional part of the Electronic Communications Privacy Act (ECPA), a 30-year-old law that government agencies increasingly cite when forcing email, Internet and cloud storage service providers to hand over data to aid criminal investigations.
Smith in his post, and Microsoft in the complaint filed with a Seattle federal court, alleged that the government has been routinely putting gag orders on data demands. Of the 5,624 federal requests over the last 18 months, 48% were accompanied by a gag order that forbid Microsoft from informing customers that their data had been given to authorities. More than two-thirds of the gag orders did not have a fixed end date.
"This means that we effectively are prohibited forever from telling our customers that the government has obtained their data," Smith said.
While Smith characterized the lawsuit as an attempt to restore "our customers' constitutional and fundamental rights -- rights that help protect privacy and promote free expression," the battle was also fought because Microsoft is concerned that the government's actions risk its fastest-growing businesses, its cloud-based Azure platform and Office 365.
Microsoft's motivation came from business customers who worry that their cloud-stored emails, documents and other data are being accessed without their knowledge, said Michael Carroll, a professor of law and director of the Program on Information Justice and Intellectual Property at the American University Washington College of Law, in Washington, D.C.
"'What does it mean when I move my data to the cloud?'" Carroll said, taking the role of a business that has, or is considering, migrating some or all of its on-premises infrastructure to Microsoft's data centers. Uncertainty about who accesses data, and when, generates what Carroll called "business blowback," and hesitancy to shift to the cloud.
Sign up for Computerworld eNewsletters.