Supreme Court sticks to the sidelines in DoJ-Microsoft dispute
CLOUD Act raises crucial questions about overseas data that court fails to answer


The US Supreme Court has decided to drop a test case between Microsoft and the Department of Justice (DoJ), leaving a serious legal question about the reach of America's Courts in the digital world.
In a case that had started in 2013, Microsoft refused to hand over emails stored in severs at the company's data centre in Dublin that were subject to a warrant over a criminal investigation into alleged drug trafficking.
After decisions both in favour and against each party made in various courts, the case came to the Supreme Court to decide once and for all. But the Justices decided on Monday that the case was moot because of the new CLOUD Act passed into law by Congress last month.
The Clarifying Lawful Overseas Use of Data (CLOUD) Act states that US companies are obliged to provide access to all content - whether held on a server in the US or outside the country - if they are issued with a warrant, but can reject such demands if they conflict with foreign laws, such as data protection legislation.
The DoJ immediately issued a new warrant to Microsoft in light of the law, which readily handed over the data, and both parties asked the Supreme Court to close the case, as no live dispute remained.
However, by closing the case, the Supreme Court avoided weighing in on the legal question of whether a company could refuse to comply with such a warrant due to it contradicting the local law where the data is stored.
After the Act had passed, US Senator Ron Wyden questioned the legitimacy of the bill given its rush through Congress, with the legislation attached to a huge spending bill document.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"This bill contains only toothless provisions on human rights that Trump's cronies can meet by merely checking a box. It is legislative malpractice that Congress, without a minute of Senate debate, is rushing through the CLOUD Act on this must-pass spending bill," he said.
Bobby Hellard is ITPro's Reviews Editor and has worked on CloudPro and ChannelPro since 2018. In his time at ITPro, Bobby has covered stories for all the major technology companies, such as Apple, Microsoft, Amazon and Facebook, and regularly attends industry-leading events such as AWS Re:Invent and Google Cloud Next.
Bobby mainly covers hardware reviews, but you will also recognize him as the face of many of our video reviews of laptops and smartphones.
-
Westcon-Comstor and Vectra AI launch brace of new channel initiatives
News Westcon-Comstor and Vectra AI have announced the launch of two new channel growth initiatives focused on the managed security service provider (MSSP) space and AWS Marketplace.
By Daniel Todd Published
-
Third time lucky? Microsoft finally begins roll-out of controversial Recall feature
News The Windows Recall feature has been plagued by setbacks and backlash from security professionals
By Emma Woollacott Published
-
Top data security trends
Whitepaper Must-have tools for your data security toolkit
By ITPro Published
-
Why bolstering your security capabilities is critical ahead of NIS2
NIS2 regulations will bolster cyber resilience in key industries as well as improving multi-agency responses to data breaches
By ITPro Published
-
SEC data breach rules branded “worryingly vague” by industry body
News The new rules announced last week leave many questions unanswered, according to security industry experts
By Ross Kelly Published
-
Crackdown on crypto needed to curb cyber crime, says expert
News Threat actors would struggle to generate money without the anonymity provided by unregulated digital tokens, but such a move would require worldwide buy-in
By Rory Bathgate Published
-
The gratitude gap
Whitepaper 2023 State of Recognition
By ITPro Published
-
UK gov invites experts to contribute to its overhauled AI regulatory approach
News The new approach will not adopt the EU's centralised model and sits alongside the National AI Strategy and Data Protection and Digital Information Bill
By Connor Jones Published
-
UK government opts against regulation for cyber security standards
News UK Cyber Security Council will move ahead with its planned chartered standards, with the government to monitor its adoption
By Daniel Todd Published
-
Encryption battle plays out in Australian Parliament
News The opposition said that the government is “addicted to secrecy”
By Zach Marzouk Published