NEWS ANALYSIS: After their loss in a federal appeals court, the Department of Justice is looking for ways bypass current warrant limitations with new bilateral agreements.
The day the Department of Justice lost its case before a federal circuit court where it was seeking to force Microsoft to turn over email content stored on a server in Ireland, the department was presenting a plan to sidestep those limits with new legislation.The DOJ revealed its plans at a meeting of the Advisory Committee to the Congressional Internet Caucus.
The presentation included a draft of proposed legislation attached to a letter to Vice President Joe Biden and a white paper explaining the need for it.The draft legislation is part of a proposed bilateral agreement between the United States and the United Kingdom that would allow courts and other designated investigative agencies to directly order the release of private user information held by U.S. companies.The proposed legislation specifies that the information to be sought must be about foreign nationals located outside the United States and that the request must be in accordance with the laws of the U.S. and the laws of the foreign government, in this case the UK.
The proposed legislation would require passage by the U.S. House of Representatives and the U.S.
Senate, and it would need to be signed by the President.
If passed in its current form, the legislation would provide protection for U.S. companies that had to comply with the laws of the country demanding the information.
The bulk of the legislation actually consists of amendments to existing laws that govern how private information located on the Internet is protected and who can see it.
The idea behind the proposed legislation is to streamline access to data being held across international borders during the investigation of a crime.According to former White House Cybersecurity Director Ari Schwartz, when foreign law enforcement agencies needed information on foreign nationals that was being held by U.S. companies they were directed to use the mutual legal assistance treaty (MLAT).
But when U.S. law enforcement wanted information, they just expected it to be turned over, regardless of whether it was located outside the US.“A lot of countries felt it was hypocritical,” Schwartz said. Meanwhile, he said that the companies that were being forced to turn over information found themselves in an impossible situation of either violating U.S. law or the laws of the foreign country.Schwartz said that while the MLAT process was intended to provide the information required by law enforcement or the courts, it could be cumbersome for U.S. agencies seeking information from abroad as well as for foreign agencies seeking information stored in the U.S.
Schwartz said that he worked on incoming MLAT requests a number of times and they weren’t always prepared properly.