Microsoft: We don't give NSA direct access to email

The company does not help government agencies defeat its email encryption, says Microsoft's general counsel

Microsoft does not give the U.S. National Security agency direct access to its customers' email or instant messages, contrary to previous news reports, a company executive said.

News reports last week suggested that Microsoft has helped the NSA circumvent the company's own encryption in order to conduct surveillance on email accounts through Outlook.com, but company General Counsel Brad Smith said Tuesday that's not true.

"We do not provide any government with direct access to emails or instant messages," Smith wrote in a blog post. "Full stop."

The company does not help government agencies circumvent its encryption, he added. "To be clear, we do not provide any government with the ability to break the encryption, nor do we provide the government with the encryption keys," he wrote. "When we are legally obligated to comply with [government] demands, we pull the specified content from our servers where it sits in an unencrypted state, and then we provide it to the government agency."

Microsoft on Tuesday asked U.S. Attorney General Eric Holder to permit Microsoft and other communications providers to share "more complete information" about how they handle national security requests for customer information, Smith added.

"We believe the U.S. Constitution guarantees our freedom to share more information with the public, yet the government is stopping us," he said. The U.S. government has not responded to a June 19 request Microsoft made to publish the number of national security requests it receives, and the company hopes Holder will step in, Smith said.

Microsoft provides government access to data stored in its SkyDrive service and to Skype calls when presented with a legal order to do so, such as a search warrant or national security letter, Smith said. If asked for customer data in enterprise email or document storage, Microsoft attempts to redirect the requesting government agency back to the customer, he said, "and we notify the customer unless we are legally prohibited from doing so."

Microsoft has never provided any government with customer data from any business or government customers for national security purposes, he said. In 2012, the company complied with four law enforcement requests related to business or government customers, he added.

Grant Gross covers technology and telecom policy in the U.S. government for The IDG News Service. Follow Grant on Twitter at GrantGross. Grant's e-mail address is grant_gross@idg.com.

2015 ARN ICT Industry Awards: NOMINATE NOW!!!: Nominations for the 2015 ARN ICT Industry Awards are now open. Once again, it is time to NOMINATE NOW!!!

Join the ARN newsletter!

Error: Please check your email address.

Tags Internet-based applications and servicesMicrosoftsecurityBrad SmithMailU.S. National Security AgencyEric Holdergovernmentinternetprivacy

More about CounselIDGMicrosoftNSASkype

ARN Directory | Distributors relevant to this article

Show Comments
 
Computerworld
CIO
Techworld
CMO

Latest News

06:00PM
Exclusive Group secures new investment to support continued growth strategy
04:03PM
Avaya awards its top Asia-Pacific channel partners
May 29
A/NZ Shoppers deserting retailers due to online performance issues: Rackspace
May 29
Fujitsu World Tour 2015: A focus on the healthy human side of IoT (+8 photos)
More News
04 Jun
Websense Data Theft Prevention Breakfast - Melbourne
04 Jun
IM Experience, Sydney
09 Jun
Ascom Nurse Call product launch
10 Jun
D-Link IP Surveillance Training and Certification
View all events