Microsoft refuses to divulge data flows to Police Scotland
12 days ago
- #Microsoft
- #law-enforcement
- #data-protection
- Microsoft refuses to disclose data flow details to Police Scotland, citing commercial confidentiality.
- Police Scotland and the Scottish Police Authority (SPA) cannot comply with UK data protection laws due to lack of information.
- Microsoft cannot guarantee data sovereignty for law enforcement data stored in Office 365.
- Sensitive data could be processed in countries like China, India, and the UAE without adequate protections.
- Microsoft holds encryption keys, potentially allowing US government access under the Cloud Act.
- UK government amended data protection laws to accommodate cloud providers, reducing safeguards.
- Police Scotland and SPA face legal and operational challenges if they deviate from Microsoft's cloud services.
- Previous police cloud deployments were found non-compliant with data protection laws.