How Private Are Your Emails From The Government?
from the legal-questions dept
Slashdot has a post up claiming that the government has the right to read your emails, which is a little misleading. However, the story does raise some interesting issues. While the article there suggests that the government has an open right to snoop through your emails, what the actual case is about is the standard that the government can use before it can look at emails you have that are stored on someone else's servers (such as Yahoo or Google). The specific case involves a seller of "male enhancement" products who is being sued by the government. They viewed some of his emails that were stored Yahoo's mail servers. They didn't, as the original post implies, have free access to them, but required a court order directed at the companies hosting the servers to see them. The argument, then, is over whether or not a court order is enough, or if the government should have been required to get a search warrant, which would require a higher level of proof and support before a court would grant permission.If you take it a step back, what this really becomes is an argument over who owns your emails. If you believe that you own your own emails once they're in your inbox, then like traditional mail, it would seem that a search warrant is the right standard. However, if you believe that whoever is storing the content owns the rights to access it, then, the court order should be enough. This is made that much more complicated by the fact that a piece of email traveling around a network could leave traces or copies on many different servers at times. Where this gets really tricky is that if the "court order" standard is accepted, that puts an awful lot of data at risk of being easily targeted by the government. With the rise of "hosted" services for things like enterprise software, email, photos and even documents and spreadsheets -- all of that information may now be much more easily viewed by government authorities. It still requires a court order, but as long as they're on someone else's server, it appears that a search warrant may not be needed. One of the reasons that many companies have shied away from software as service vendors was fear that by putting their data on other servers it would be more open to hackers or competitors. Apparently, it's also more open to government officials, based on the current ruling in this court case.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Reader Comments
Subscribe: RSS
View by: Time | Thread
Hosted CRM
[ link to this | view in chronology ]
Who owns a post office box?
[ link to this | view in chronology ]
Re: Who owns a post office box?
I believe a better analogy is a plain old phone line. I put data (voice) on the line with the expectation that even though it is out of my control, now, I am still responsible for it and the phone company is not. Does it take a court order to tap a phone line or a search warrant? Emails are much the same. I put data into the system, out of my control, but I still view it as my property. (it is irrelevant whether I have had the diligence to encrypt it. the question is still does it belong to me)
[ link to this | view in chronology ]
Re: Re: Who owns a post office box?
[ link to this | view in chronology ]
Who cares
[ link to this | view in chronology ]
Re: Who cares
[ link to this | view in chronology ]
I don't like it...
Besides here is a direct quote from GMail's Terms of Use:
"Your Intellectual Property Rights. Google does not claim any ownership in any of the content, including any text, data, information, images, photographs, music, sound, video, or other material, that you upload, transmit or store in your Gmail account. We will not use any of your content for any purpose except to provide you with the Service."
But then they go on to say:
"You do, however, agree that Google may monitor, edit or disclose your personal information, including the content of your emails, if required to do so in order to comply with any valid legal process or governmental request (such as a search warrant, subpoena, statute, or court order), or as otherwise provided in these Terms of Use and the Gmail Privacy Policy."
So, you get what you agreed to.
[ link to this | view in chronology ]
The hat!
[ link to this | view in chronology ]
Encryption
[ link to this | view in chronology ]
[ link to this | view in chronology ]
cant touch this
[ link to this | view in chronology ]
Interesting Point
[ link to this | view in chronology ]
Bruce Schneier said it best...
I think the USPS/PO BOX/Mail forwarding service is a good analogy. The storage of email on a service providers server is the same as a 3rd party forwarding service in regards to expectation of privacy and govt snooping. You are sending an email from one party to another, and you don't expect that anybody else is reading it.
I agree with the idea of encryption for all. The eventual road for P2P, browsing, email, etc - will all be encrypted - encrypted tunnels, encrypted email, etc - you name it. That's where all of this is going if the gov't can't stick to the rules and respect constitutional implications of privacy.
[ link to this | view in chronology ]
Re: Bruce Schneier said it best...
By using email specific encryption, you don't have to worry about other people snooping. Especially if you're an entrepreneur or work for a financial or legal firm with assets and customer information to protect.
But although email has been in use for awhile, it's a new enough medium where we still haven't drawn clear lines as to 3rd party involvement/privacy laws, etc... So my question is: legally, can the government force you to decrypt your messages if they can't, to use as evidence?
[ link to this | view in chronology ]
Very convienient.
[ link to this | view in chronology ]
cisco
[ link to this | view in chronology ]
personal mail server
[ link to this | view in chronology ]
Think of your emails like a published book, you have copyright over the data as you created it, but if you send it across a public network then you have no say in who can view it.
Ownership of data stored on an external provider is subject to the conditions of used of that provider.
A search warrant makes sense if it's your data and it's on your servers.
[ link to this | view in chronology ]
I think I found phase two
2. Make a law that requires all emails to leave some sort of trail.
3. Profit
[ link to this | view in chronology ]
Email Private Ha!
[ link to this | view in chronology ]
Postal Mail?
The "owner" of the email is the one who sent it and anybody else it's addressed to. Anybody else has absolutely no rights to it.
It's illegal to open another person's postal mail without prior consent. Why can't it be that way for email, too?
Is there something I'm missing here?
As for the email on remote servers; it's like PO Box. What rights do governments have in searching those?
[ link to this | view in chronology ]
E-mail Privacy
Even if legally they had to seek a court order, we all know that the 'intelligence services' do not obey the law when it suits them. What I object to is the US government even thinking that they have any right to snoop on the emails of UK citizens. What they do to their own is up to the people of the US. But 'George inc' can keep its nose out of my mail!
[ link to this | view in chronology ]