// Home / Enterprise / News

Apple and Dropbox join US private data fight

By Stewart Mitchell

Posted on 23 Sep 2011 at 17:18

Apple and Dropbox have signed up to a privacy agreement that looks to prevent user data from being handed over to US authorities too easily.

The Electronic Frontier Foundation launched its “Who has your back” campaign in April this year, asking companies to be firmer in defending user data when government officials made requests.

The campaign is also pushing for amendments to the 25-year-old Electronic Communications Privacy Act, which is used by US authorities to demand information from companies holding data, claiming the legislation is out of date.

While some internet companies have stepped up for users in particular situations, it's time for all companies who hold your private data to promise to do so

Although companies can’t refuse to hand over the details once a request has gone through due process, EFF has been pushing for companies to be more open about how they treat data requests.

Services like Dropbox store personal files in the cloud, so could be vulnerable if authorities seek out information in those files.

Apple and DropBox were on a list of 13 companies, which also include Amazon, Yahoo, Facebook and Microsoft, that were being targeted by the EFF.

By signing up to the programme, Apple and DropBox will be expected to inform users when their data is demanded by the authorities, tell them when it has been handed over and fight for privacy rights in Congress.

“It's often up to the companies to decide whether to stand with their users,” the EFF campaign states.

“While some internet companies have stepped up for users in particular situations, it's time for all companies who hold your private data to promise to do so.”

Subscribe to PC Pro magazine. We'll give you 3 issues for £1 plus a free gift - click here

From around the web

User comments

Wut

Who in their right mind would want to store important personal or corporate information with apple or dropbox? It is the equivalent to handing over the data to any hacker and any US pig farm. Those services are ok to store family photos and nothing more.

By arthur_cabot on 23 Sep 2011

Encrypt your data

Dropbox + TrueCrypt and you're good to go.

By greatkingrat_666 on 23 Sep 2011

@arthur_cabot

You're right but with the impending arrival of iCloud, many users will start doing this with Apple by default without really thinking through the implications.

Also, these services are very useful, and we *should* be able to use them without fear of who is going to get hold of our data. Personally I'm pleased that someone is taking the fight to the ever intrusive authorities; how much good it actually does remains to be seen. :\

By SirRoderickSpode on 24 Sep 2011

TrueCrypt might be great, but dont forget the RIPA - hand your passwords over or go to jail. I love this free state.

By gict1 on 24 Sep 2011

Wow - Advice please?

"It is the equivalent to handing over the data to any hacker and any US pig farm."

OK 2 Questions folks.

Why is Google not contesting this and how secure are they?

And the third is -
Truecrypt hand over passwords? I think not they don't have them. They offer the software and that is that. The encrypted folders are on my PC and the passwords are in my head. No?

I am keen to hear from the cognoscenti on these Qs'

Thanks

PS - The European Convention of Human Rights say that I have the right to a private life... I guess it is until my government says Not... This hacks me off.

By Kevin000 on 24 Sep 2011

@Kevin000 - The "hand over your passwords or go to jail" means YOU hand over your password, not the makers of your encryption software...

Am I missing something - Truecrypt is for encrypting hard disks and partitions. What good is it for individual files that you put on Dropbox etc (unless you upload an entire encrypted partition container).

By halsteadk on 25 Sep 2011

@Kevin000

Any company with an office in the USA is behoven to the Patriot Act, which means they have to hand the data over upon request - even if that data is stored on a server in another region or country (say the EU) and even if handing said data over would break laws in said region.

This is why the Dutch have banned Microsoft and Google from getting government contracts.

No cloud based company, which does business in America, can guarantee data security or that they will follow data protection law.

(EU law says that any data on EU citizens cannot be exported outside the EU zone without the explicit permission of the affected person. Companies faced with a Patriot Act request must export their data from their European servers to the US office and hand it over to the US Governmnet - and they are explicitly NOT allowed to inform the affected person(s).

Secondly, Microsoft or Google (or others) aren't liable, if the data is sent outside the EU borders, the "owner" of the data is legally liable - Google's customers. That would mean, in the case of the Dutch Government, that if Google or MS handed Dutch Government information over to the US Governmnet (say NI number, tax information etc.) the Dutch Government could be prosecuted by individuals, the EU or data protection organisations.)

The whole Cloud concept hasn't been thought through and things like the Patriot Act in America mean that no cloud service can service both America and the rest of the world.

By big_D on 25 Sep 2011

@Halsteadk and big_D

Thanks folks - I see now.

I would still like to see Google challenging this too.

Yes, it would mean uploading encrypted folders.

Why should they 'think it through'? There are dollars to be made! I guess it is we who need to think it through eh?

By Kevin000 on 25 Sep 2011

Leave a comment

You need to Login or Register to comment.