<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.m1889088236262078184hoenzb
{mso-style-name:m_1889088236262078184hoenzb;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Dear Giuseppe<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I certainly don’t disagree with you that as a matter of policy Europeans may change their purchasing preferences. I was addressing what I thought you were saying (perhaps I was wrong in understanding you) that American companies responding to law enforcement requests were at legal risk. Given the US-EU agreement, they are not … at least not at this moment.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Paul<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Paul Rosenzweig<o:p></o:p></p><p class=MsoNormal><a href="mailto:paul.rosenzweig@redbranchconsulting.com"><span style='color:#0563C1'>paul.rosenzweig@redbranchconsulting.com</span></a><o:p></o:p></p><p class=MsoNormal>O: +1 (202) 547-0660<o:p></o:p></p><p class=MsoNormal>M: +1 (202) 329-9650<o:p></o:p></p><p class=MsoNormal>VOIP: +1 (202) 738-1739<o:p></o:p></p><p class=MsoNormal><a href="http://www.redbranchconsulting.com/"><span style='color:#0563C1'>www.redbranchconsulting.com</span></a><o:p></o:p></p><p class=MsoNormal>My PGP Key: <a href="https://keys.mailvelope.com/pks/lookup?op=get&search=0x9A830097CA066684"><span style='color:#0563C1'>https://keys.mailvelope.com/pks/lookup?op=get&search=0x9A830097CA066684</span></a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>From:</b> Giuseppe De Francesco [mailto:defrancescog@gmail.com] <br><b>Sent:</b> Tuesday, October 17, 2017 11:59 AM<br><b>To:</b> Paul Rosenzweig <paul.rosenzweig@redbranchconsulting.com><br><b>Cc:</b> NCSG-DISCUSS@listserv.syr.edu<br><b>Subject:</b> Re: US Supreme Court Case over Legal access to data stored in overseas server farms.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><div><div><div><p class=MsoNormal style='margin-bottom:12.0pt'>Paul, allow me to submit that the very second that I, as an EU citizen, come to know that I'm going to be subject to US laws I will move to EU suppliers. This will kill US business quite quickly. Moreover, countries like Germany, UK, ireland, France are strong about having their data hosted in their own jurisdiction exactly to be in charge and in control of what they authorize. We in EU have been discussing this for a long time, and there is general agreement not to submit to US or any other foreign law. This is very important here, so if US wants to boost EU data business and kill US presence then be my guest :)<o:p></o:p></p></div><p class=MsoNormal>Regards,<o:p></o:p></p></div><p class=MsoNormal>Giuseppe<o:p></o:p></p><div><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div></div></div><div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>On 17 October 2017 at 14:57, Paul Rosenzweig <<a href="mailto:paul.rosenzweig@redbranchconsulting.com" target="_blank">paul.rosenzweig@redbranchconsulting.com</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>With respect Giuseppe, the EU privacy directives are all conditioned by an overaching umbrella agreement between the US and the EU on law enforcement data sharing. As I read the agreement it would permit compliance by US companies faced with a lawful US order, except in rare cases of an express contrary national law in a Member State of the EU. <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Of course, the ECJ my when confronted with the question reject the umbrella agreement as contrary to the ECHR. But it has not yet done so and the European Commission will oppose that conclusion. So your conclusion is, I think, at best premature.<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Cheers<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Paul<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Paul Rosenzweig<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="mailto:paul.rosenzweig@redbranchconsulting.com" target="_blank"><span style='color:#0563C1'>paul.rosenzweig@redbranchconsulting.com</span></a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>O: <a href="tel:+1%20202-547-0660" target="_blank">+1 (202) 547-0660</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>M: <a href="tel:+1%20202-329-9650" target="_blank">+1 (202) 329-9650</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>VOIP: <a href="tel:+1%20202-738-1739" target="_blank">+1 (202) 738-1739</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://www.redbranchconsulting.com/" target="_blank"><span style='color:#0563C1'>www.redbranchconsulting.com</span></a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>My PGP Key: <a href="https://keys.mailvelope.com/pks/lookup?op=get&search=0x9A830097CA066684" target="_blank"><span style='color:#0563C1'>https://keys.mailvelope.com/pks/lookup?op=get&search=0x9A830097CA066684</span></a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b>From:</b> NCSG-Discuss [mailto:<a href="mailto:NCSG-DISCUSS@LISTSERV.SYR.EDU" target="_blank">NCSG-DISCUSS@LISTSERV.SYR.EDU</a>] <b>On Behalf Of </b>Giuseppe De Francesco<br><b>Sent:</b> Tuesday, October 17, 2017 5:27 AM<br><b>To:</b> <a href="mailto:NCSG-DISCUSS@LISTSERV.SYR.EDU" target="_blank">NCSG-DISCUSS@LISTSERV.SYR.EDU</a><br><b>Subject:</b> Re: US Supreme Court Case over Legal access to data stored in overseas server farms.<o:p></o:p></p><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>If US companies violate in any way EU privacy directives (and this would be the case, big time) they'll be liable both for the criminal offense and the civil damage, thus I strongly hope none of them will comply with such order that undermines our EU sovregnity. No US law nor court decision can apply here in EU unless an EU court approves such an order, and that will be on a case by case basis.<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>On 17 October 2017 at 09:30, Raoul Plommer <<a href="mailto:plommer@gmail.com" target="_blank">plommer@gmail.com</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt'><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>They'd be smart to make overseas data inaccessible for the law enforcement at least on paper, because no one can actually monitor Microsoft et al whether they respect the decision. If they don't, there will be severe repercussions for the technology companies involved (Micorsoft, Google, FB, Twitter etc) and tech companies in other countries and their respective governments will demand the same rights.<o:p></o:p></p><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='color:#888888'>-Raoul</span><o:p></o:p></p></div></div><div><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>On 16 October 2017 at 20:51, Sam Lanfranco <<a href="mailto:lanfran@yorku.ca" target="_blank">lanfran@yorku.ca</a>> wrote:<o:p></o:p></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt'><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>US Supreme Court Case over Legal access to data stored in overseas server farms.<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://www.sfchronicle.com/business/technology/article/Justices-to-hear-government-s-email-dispute-with-12281138.php" target="_blank">http://www.sfchronicle.com/business/technology/article/Justices-to-hear-government-s-email-dispute-with-12281138.php</a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>WASHINGTON (AP) — The Supreme Court agreed Monday to take on a major dispute over the government's authority to force American technology companies to hand over emails and other digital information sought in criminal probes but stored outside the U.S.<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Sam L. <o:p></o:p></p></div></blockquote></div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div></div></div></blockquote></div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><br><br clear=all><br>-- <o:p></o:p></p><div><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><br><br>==============================================<br>Giuseppe [Pino] De Francesco<br>Skype: PinoEire<br>Mobile: <a href="tel:087%20273%209446" target="_blank">+353-87-2739446</a><br>==============================================<br>Please consider the environment before printing this email<br>==============================================<o:p></o:p></p></div></div></div></div></div></div></div></div></blockquote></div><p class=MsoNormal><br><br clear=all><br>-- <o:p></o:p></p><div><div><div><p class=MsoNormal><br><br>==============================================<br>Giuseppe [Pino] De Francesco<br>Skype: PinoEire<br>Mobile: +353-87-2739446<br>==============================================<br>Please consider the environment before printing this email<br>==============================================<o:p></o:p></p></div></div></div></div></div></body></html>