Microsoft must hand over overseas data, US court rules
Software giant to appeal ruling asking it to hand over data from its Irish datacentre

Microsoft has lost another bid to have a US government warrant demanding access to emails stored in its Dublin-based datacentre overturned.
The company has been ordered to hand over the emails to law enforcers in the US as part of a criminal investigation, the details of which have not been disclosed at this time.
US district judge Loretta Preska has ruled that Microsoft must hand over the data, even though it's stored in a country outside of US jurisdiction.
However, Preska has put a delay on when the order comes into effect to give Microsoft time to lodge an appeal with the 2nd US Circuit Court of Appeals.
The software giant has been locked in a legal battle in the US on the matter since December 2013, and has vowed to appeal against the latest ruling.
In a blog post, Brad Smith, executive vice president and general counsel for Microsoft, said: "The only issue that was certain... was that the District Court's decision would not represent the final step in this process.
"We will appeal promptly and continue to advocate that people's email deserves strong privacy protection in the US and around the world," Smith concluded.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
This isn't the first time Microsoft has challenged the ruling, after New York judge James Francis declared in April 2014 that the investigative powers of law enforcers would be "seriously impeded" if they were unable to access data stored overseas, considered out of their jurisdiction.
The outcome of the case has far-reaching implications for the technology industry, and Microsoft's unerring stance on the matter has won the backing of Apple, Cisco, Verizon and others.
If Microsoft loses its appeal, other tech firms could be forced to hand over customer data stored overseas.
-
Should AI PCs be part of your next hardware refresh?
AI PCs are fast becoming a business staple and a surefire way to future-proof your business
By Bobby Hellard Published
-
Westcon-Comstor and Vectra AI launch brace of new channel initiatives
News Westcon-Comstor and Vectra AI have announced the launch of two new channel growth initiatives focused on the managed security service provider (MSSP) space and AWS Marketplace.
By Daniel Todd Published
-
Forcing Apple to allow alternative app stores might cause major security risks
Analysis Apple will be forced to allow third-party marketplaces on its devices, but some experts have raised serious security concerns
By Solomon Klappholz Published
-
Why bolstering your security capabilities is critical ahead of NIS2
NIS2 regulations will bolster cyber resilience in key industries as well as improving multi-agency responses to data breaches
By ITPro Published
-
New EU vulnerability disclosure rules deemed an "unnecessary risk"
News The vulnerability disclosure rules in the Cyber Resilience Act could also cause a “chilling effect” on security researchers
By Ross Kelly Published
-
Are you ready for NIS2?
WEBINAR Find out what you should be doing to prepare for the EU’s latest data protection regulation and UK equivalent with our free webinar
By ITPro Published
-
EU regulators are digging their heels in despite big tech’s Data Act pushback
Analysis EU regulators are no strangers to big tech regulatory push back, so why do companies still persist?
By Ross Kelly Published
-
Microsoft's EU Data Boundary will begin staggered rollout in January 2023
News Public sector and commercial customers will be the first to benefit when the rollout begins on 1 January across all of Microsoft's core services
By Ross Kelly Published
-
EU watchdog fights against rules permitting Europol's ‘unlawful’ data practices
News The pushback follows allegations that Europol was allowed to write its own rules when it came to handling sensitive data
By Connor Jones Published
-
EU to introduce strict IoT security regulation
News Manufacturers will be required to assess all risks, and notify the EU of issues within 24hrs
By Rory Bathgate Published