{"id":36648,"date":"2018-03-28T19:49:10","date_gmt":"2018-03-28T17:49:10","guid":{"rendered":"https:\/\/owncloud.com\/?p=36648"},"modified":"2020-07-09T10:32:37","modified_gmt":"2020-07-09T10:32:37","slug":"cloud-act-passed-by-us-congress","status":"publish","type":"post","link":"https:\/\/owncloud.com\/de\/blogs\/cloud-act-passed-by-us-congress\/","title":{"rendered":"CLOUD Act Passed by US Congress"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">Last month Utah Senator Orrin Hatch and Georgia Representative Doug Collins introduced <\/span><a href=\"https:\/\/www.congress.gov\/bill\/115th-congress\/senate-bill\/2383\/cosponsors?pageSort=lastToFirst&amp;loclr=cga-bill\" target=\"_blank\" rel=\"noopener noreferrer\"><span style=\"font-weight: 400;\">The CLOUD (Clarifying Lawful Overseas Use of Data) Act <\/span><\/a><span style=\"font-weight: 400;\">to the United States Congress in an attempt to change how data is collected from tech companies stored outside of the U.S. by both U.S. law enforcement agencies and foreign governments seeking data from U.S. tech companies. The act, in their eyes, is meant to \u201cstreamline\u201d which law enforcement agencies have access to personal data stored on U.S.-based tech companies. Then, to get the act passed, it was snuck into the current spending bill that has been on the floor for the past few weeks. Well, this past Friday, March 23rd, the bill passed in Congress. And people ARE NOT happy.<\/span><\/p>\n<p><b>What\u2019s the big deal? <\/b><\/p>\n<p><span style=\"font-weight: 400;\">Following the proposal \u201cprivacy advocates such as<\/span><a href=\"https:\/\/www.aclu.org\/bio\/neema-singh-guliani\" target=\"_blank\" rel=\"noopener noreferrer\"><span style=\"font-weight: 400;\"> Neema Singh Guliani of the American Civil Liberties Union<\/span><\/a><span style=\"font-weight: 400;\"> showed concerned about how the proposed law gives a great deal of leeway to the executive branch when it comes to determining which countries are allowed to subpoena U.S. tech companies, removing a judicial review\u201d <\/span><a href=\"https:\/\/www.geekwire.com\/2018\/congress-considers-tech-backed-cloud-act-privacy-human-rights-groups-raise-concerns\/\" target=\"_blank\" rel=\"noopener noreferrer\"><span style=\"font-weight: 400;\">according to an article by Tom Krazit on GeekWire<\/span><\/a><span style=\"font-weight: 400;\">. Krazit goes on to further say that, \u201cGuliani and others believe this bill exposes individuals to abuse by law-enforcement agencies and also puts an undue burden on smaller tech companies to respond directly to requests from foreign governments.\u201d <\/span><\/p>\n<p><span style=\"font-weight: 400;\"><img loading=\"lazy\" decoding=\"async\" class=\"alignright wp-image-36651 size-medium\" title=\"The Fourth Amendment, Nick Youngson \" src=\"https:\/\/owncloud.com\/wp-content\/uploads\/2018\/03\/the-fourth-amendment-300x200.jpg\" alt=\"\" width=\"300\" height=\"200\" \/>The <\/span><a href=\"https:\/\/www.eff.org\/deeplinks\/2018\/03\/new-backdoor-around-fourth-amendment-cloud-act\" target=\"_blank\" rel=\"noopener noreferrer\"><span style=\"font-weight: 400;\">Electronic Freedom Foundation<\/span><\/a><span style=\"font-weight: 400;\"> has even gone as far to say that the CLOUD Act provides a loophole to the <\/span><a href=\"http:\/\/constitution.findlaw.com\/amendment4.html\" target=\"_blank\" rel=\"noopener noreferrer\"><span style=\"font-weight: 400;\">4th Amendment of the Constitution<\/span><\/a><span style=\"font-weight: 400;\">, \u201cThe right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.\u201d<\/span><\/p>\n<blockquote><p><i><span style=\"font-weight: 400;\">\u201cThe CLOUD Act has two major components. First, it empowers U.S. law enforcement to grab data stored anywhere in the world, without following foreign data privacy rules. Second, it empowers the president to unilaterally enter executive agreements with any nation on earth, even known human rights abusers. Under such executive agreements, foreign law enforcement officials could grab data stored in the United States, directly from U.S. companies, without following U.S. privacy rules like the Fourth Amendment, so long as the foreign police are not targeting a U.S. person or a person in the United States.<\/span><\/i><\/p>\n<p><i><span style=\"font-weight: 400;\">When foreign police use their power under CLOUD Act executive agreements to collect a foreign target\u2019s data from a U.S. company, they might also collect data belonging to a non-target U.S. person who happens to be communicating with the foreign target. Within the numerous, combined foreign investigations allowed under the CLOUD Act, it is highly likely that related seizures will include American communications, including email, online chat, video calls, and internet voice calls.\u201d<\/span><\/i><\/p><\/blockquote>\n<p><span style=\"font-weight: 400;\">To put more clearly, according to Rhett Jones\u2019 <\/span><a href=\"https:\/\/gizmodo.com\/congress-could-sneak-a-bill-threatening-global-privacy-1823793207\" target=\"_blank\" rel=\"noopener noreferrer\"><span style=\"font-weight: 400;\">article<\/span><\/a><span style=\"font-weight: 400;\"> in Gizmodo:<\/span><\/p>\n<blockquote><p><i><span style=\"font-weight: 400;\">\u201cThe CLOUD Act would weaken those privacy protections and open up a free for all of data sharing. A foreign government could request data about a non-US citizen from a company storing it on US soil without the need for a warrant. It could also intercept communications or metadata of a non-US citizen target in real time. If, by chance, that foreign government collected communications or content from an American in the course of their surveillance, it could then turn it over to US law enforcement. As long as the information \u2018relates to significant harm, or the threat thereof, to the United States or United States persons,\u2019 that information could then be used to investigate or criminally charge a US citizen.\u201d<\/span><\/i><\/p><\/blockquote>\n<p><b>So what does this mean for the rest of the world? How would this affect the soon to be implemented General Data Protection Regulation?<\/b><\/p>\n<p><span style=\"font-weight: 400;\"><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-36653 alignright\" src=\"https:\/\/owncloud.com\/wp-content\/uploads\/2018\/03\/35440117101_cbfe2c9d2b_b-300x188.jpg\" alt=\"\" width=\"300\" height=\"188\" \/>The CLOUD Act threatens to undermine the new <\/span><a href=\"https:\/\/www.eugdpr.org\/\" target=\"_blank\" rel=\"noopener noreferrer\"><span style=\"font-weight: 400;\">General Data Protection Regulation<\/span><\/a><span style=\"font-weight: 400;\"> (GDPR), which will be implemented on May 25, 2018. The intent of GDPR is to strengthen and unify data protection for all individuals within the European Union, and to give control back to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU. \u00a0However, \u201cthe CLOUD Act creates a framework for new bilateral agreements with foreign governments for cross-border data requests. Under these bilateral agreements, the United States and participating foreign governments would remove legal restrictions that otherwise prohibit technology providers from complying with the other country\u2019s legal requests\u201d according to the <\/span><a href=\"https:\/\/www.natlawreview.com\/article\/cloud-act-creates-new-framework-cross-border-data-access\" target=\"_blank\" rel=\"noopener noreferrer\"><span style=\"font-weight: 400;\">National Law Review<\/span><\/a><span style=\"font-weight: 400;\">. <\/span><\/p>\n<p><span style=\"font-weight: 400;\">With the passing of the CLOUD Act, ownCloud users still have no need to worry about data-transfer restrictions. ownCloud can connect federated servers in multiple geographic locations into a single user experience for seamless collaboration. <\/span><a href=\"https:\/\/owncloud.com\/playback\/cio-agenda-digitalization-vs-data-silos-consolidate-unstructured-data-now\/\" target=\"_blank\" rel=\"noopener noreferrer\"><span style=\"font-weight: 400;\">Federated File Sharing<\/span><\/a><span style=\"font-weight: 400;\"> provides frictionless file sharing across multiple ownCloud servers while maintaining the security, control and attributes of the original server as set up by IT \u2013 and leaving the master file copy on the originating ownCloud server. By keeping your data on your own servers, you maintain full control of your data and are, therefore, not susceptible to the restrictions of the CLOUD Act or GDPR. <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Last month Utah Senator Orrin Hatch and Georgia Representative Doug Collins introduced The CLOUD (Clarifying Lawful Overseas Use of Data) Act to the United States Congress in an attempt to change how data is collected from tech companies stored outside of the U.S. by both U.S. law enforcement agencies and foreign governments seeking data from [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":36649,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"categories":[48],"tags":[],"class_list":["post-36648","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/posts\/36648","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/comments?post=36648"}],"version-history":[{"count":0,"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/posts\/36648\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/media\/36649"}],"wp:attachment":[{"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/media?parent=36648"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/categories?post=36648"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/tags?post=36648"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}