Time for an international convention on government access to data
General Counsel & Executive Vice President, Legal & Corporate Affairs, Microsoft — Last week, President Obama spoke about the role of the National Security Agency and announced some important changes to the surveillance practices of the U.S. government.
Context & Ripple Effects
This call by General Counsel Brad Smith is the escalation of a strategy Microsoft began in December 2013, when it committed to expanding encryption and increasing software transparency to protect customer data after the NSA revelations. That was a unilateral technical response; this moves the argument to the legal plane, proposing a multilateral convention to govern how any government accesses data held by technology companies.
The timing matters: Smith frames the proposal directly against President Obama's January 2014 speech announcing changes to NSA surveillance practices, arguing that U.S.-only reforms cannot restore global customer trust when data crosses borders. The story travelled unusually widely for a policy blog post — GeekWire, CNET, Business Insider, Windows Phone Central and others all picked it up the same day.
First-order effects
- Microsoft positions its Legal & Corporate Affairs operation, under Smith, as the lead voice of the cloud industry on surveillance law — converting a reputational liability into a policy platform.
- The Obama administration faces pressure to match its domestic NSA reforms with a diplomatic track, since Smith's argument is that unilateral American change cannot reassure foreign customers of U.S. cloud providers.
Second-order effects
- Rival cloud providers are pushed toward the same advocacy posture or risk ceding the trust narrative to Microsoft, whose enterprise customers were the most exposed to post-NSA defection concerns.
- Foreign governments gain a seat at a table they did not previously have in setting rules for access to data held by U.S. companies, turning surveillance practice into a subject for negotiation rather than unilateral assertion.
Third-order effects
- If the pattern holds, government access to commercial data shifts from a matter of national law toward negotiated international frameworks, establishing conduct norms for state surveillance in cyberspace.
- Trust becomes a formal competitive variable for cloud providers: companies that champion governance frameworks compete on jurisdictional credibility, not just price and capability.
The trend: Major technology companies are responding to the post-2013 surveillance crisis by pushing government access to data from unilateral national law toward internationally negotiated rules.