The LEADS Act and Cloud Computing

Bipartisan legislation, introduced last month in the House and Senate, promises to reform and update the antiquated Electronic Communications Privacy Act (ECPA) and in the process push back against the practice by agencies of government to gain access to personal data stored on U.S. corporation servers abroad.

The legislation, called the LEADS Act, is co-sponsored in the Senate by Sens. Orrin Hatch (R-Utah), Chris Coons (D-Del.), and Dean Heller (R-Nev.), and in the House by Reps. Tom Marino (R-Pa.) and Suzan DelBene (D-Wash.).

Short for “Law Enforcement Access to Data Stored Abroad,” the LEADS Act’s principal improvements on ECPA are in recognizing that U.S. law enforcement may not use warrants to compel the disclosure of customer content stored outside the United States unless the account holder is a U.S. person, and by strengthening the process – called MLATs (mutual legal assistance treaties) – through which governments of one country allow the government of another to obtain evidence in criminal proceedings.

One of the better examples of the need for updating ECPA centers on a government warrant served on Microsoft for the contents of the email of an Irish citizen stored on a Microsoft server in Dublin.  >> Read More