Hatch introduces bipartisan bill to clarify cross-border data policies

Hatch introduces bipartisan bill to clarify cross-border data policies
© Greg Nash

Sen. Orrin HatchOrrin Grant HatchKey Republicans say Biden can break Washington gridlock Trump awards Medal of Freedom to racing industry icon Roger Penske Trump holds more Medal of Freedom ceremonies than predecessors but awards fewer medals MORE (R-Utah) on Monday introduced a bill aimed at creating a clearer framework for law enforcement to access data stored in cloud computing systems.

ADVERTISEMENT
Hatch’s bill is aimed at making it easier for U.S. officials to create bilateral data sharing agreements that allow them to access data stored overseas and also for foreign law enforcement to access data stored on U.S. firms’ servers.

The legislation, known as the Clarifying Lawful Overseas Use of Data (CLOUD) Act, is co-sponsored by Sens. Christopher CoonsChristopher (Chris) Andrew CoonsThe real US patent 'crisis' Senate confirms eight Trump court picks in three days Lawmakers call for investigation into program meant to help student loan borrowers with disabilities MORE (D-Del.), Lindsey GrahamLindsey Olin GrahamGraham: FBI investigation in 2016 turned into a 'criminal conspiracy' This week: House impeachment inquiry hits crucial stretch Senate braces for brawl on Trump impeachment rules MORE (R-S.C.) and Sheldon WhitehouseSheldon WhitehouseDemocrats rip Barr over IG statement: 'Mouthpiece' for Trump Trump brings pardoned soldiers on stage at Florida fundraiser: report Overnight Energy: Pelosi vows bold action to counter 'existential' climate threat | Trump jokes new light bulbs don't make him look as good | 'Forever chemicals' measure pulled from defense bill MORE (D-R.I.).

Federal law currently doesn’t specify whether the government can demand that U.S. companies give it data they have stored abroad. The CLOUD Act would amend this, likely impacting Microsoft’s pending Supreme Court case over data it has stored in Ireland. A lower court has previously ruled that Microsoft doesn’t have to turn over data stored overseas, following a request for it to do so by the Department of Justice.

Microsoft CEO Brad Smith praised the legislation in a tweet, calling it an “important step toward enhancing & protecting privacy while reducing international legal conflicts.”

Multiple technology trade associations that lobby for Microsoft and other companies signed a letter supporting the legislation.

“The bill would establish a clear statutory right for providers to challenge an order that would create a conflict of law with a qualifying foreign government — that is, a foreign government that has a reciprocal agreement with the U.S.,” the associations wrote. “These provisions would greatly improve cooperation and dialogue among countries.”

Experts outside of the industry have also welcomed the bipartisan legislation, saying that it brings needed clarification over law enforcement’s access to foreign data.

"This is a much-needed piece update to the law with long-term benefits to privacy and security. It ensures the United States can, pursuant to a warrant issued based on a finding of probable cause, lawfully access communications content needed to effectively fight crime,” said Jennifer Daskal, senior counsel at Human Rights Watch.

Daskal argued that the consistency the CLOUD Act would create would not just help U.S. law enforcement, but also provide a clear set of protections for U.S. citizen’s data as well.