Parçalı Bulutlar: Cloud Act ve Etkileri

Öz

Uluslararası teknoloji ve yazılım şirketlerinin kişisel veriler üzerinde hâkimiyeti gün geçtikçe artmaktadır. Teknoloji devi şirketler, dünyanın her bölgesinde sayıları milyarlara varan kullanıcılarının verilerini depolamak için, bulut teknolojileri kullanmak veya verileri parçalara ayırarak farklı parçaları farklı ülkelerde yer alan veri merkezlerinde saklamak gibi yeni yöntemler kullanmaktadır. Kullanılan teknolojilerin giderek karmaşık ve muğlak bir hal almasıyla birlikte, adli makamların veriye erişim ihtiyacı da artmaktadır. Bu trendlerden ötürü oluşan, açık ve modern düzenlemelere ve uluslararası araçlara duyulan gereksinim Microsoft’un dahil olduğu ve kamuoyunda büyük yankı uyandıran bir davada gözler önüne serilmiş ve kısa süre sonra yürürlüğe giren CLOUD Act adlı Kanun Amerikan mevzuatında önemli değişikliklere yol açmıştır. Bu makale, değişen teknolojilerin beraberinde getirdiği sorunları ve CLOUD Act’in etkilerini tartışmaktadır.

Anahtar Kelimeler

• Bulut
• Kişisel Veri
• Depolama
• Teknoloji
• Microsoft

Partly Cloudy: The CLOUD Act and It’s Effects

Öz

The hegemony of international technology and software companies on personal data intensifies each day. “Big tech” companies invent and employ new methods of data storage, such as cloud technologies or data shards that allow breaking up data and storing different shards in data centers located in different countries. While the technologies used by tech giants become more complex and ambiguous, the need for judicial authorities to access data has increased as well. The need for clear and modern legislation and international tools became apparent in a case involving Microsoft that drew significant public attention, and the CLOUD Act was promulgated shortly after, introducing important changes in American laws. This article discusses the issues created by developing technologies and the impact of the CLOUD Act.

Anahtar Kelimeler

• Cloud
• Storage
• Personal Data
• Technology
• Microsoft

Kaynakça

1. 12 Teknoloji Şirketi. (2018, Ocak 18). Brief for Technology Companies as Amici Curiae in Support of Respondent. https://www.supremecourt.gov/DocketPDF/17/17-2/28322/20180118154539559_17-2%20USA%20v.%20Microsoft%20Corporation.pdf adresinden alındı
2. ABD Temsilciler Meclisi. (1986). H.R. Report 99-647. https://www.justice.gov/sites/default/files/jmd/legacy/2013/10/16/houserept-99-647-1986.pdf adresinden alındı
3. ABD Temsilciler Meclisi. (2001). H.R. Report 107-236. https://www.hsdl.org/?abstract&did=487675 adresinden alındı
4. Agreement between the Government of the United Kingdom of Great Britain and Northern Ireland and the Government of the United States of America on Access to Electronic Data for the Purpose of Countering Serious Crime. (2019, Ekim 3). Washington. https://assets.publishing.service.gov.uk/government/uploads/system/uploads/attachment_data/file/836969/CS_USA_6.2019_Agreement_between_the_United_Kingdom_and_the_USA_on_Access_to_Electronic_Data_for_the_Purpose_of_Countering_Serious_Crime.pdf adresinden alındı
5. Agreement Between the United States of America and the European Union on the Protection of Personal Information Relating to the Prevention, Investigation, Detection, and Prosecution of Criminal Offences. (2016, 12 10). https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:22016A1210(01)&from=EN adresinden alındı
6. Albrecht, J. P., Veld, S. I., Reding, V., Sippel, B., & Voss, A. (2018, Ocak 18). Brief of Amici Curiae Jan Phillip Albrecht, Sophie In't Veld, Viviane Reding, Birgit Sippel and Axel Voss, Members of the European Parliament in Support of Respondent Microsoft Corporation. https://www.supremecourt.gov/DocketPDF/17/17-2/28328/20180118155453076_17-2%20bsac%20Jan%20Philipp%20Albrecht.pdf adresinden alındı
7. Avrupa Komisyonu. (2017, Aralık 13). Brief of the European Commission on Behalf of the European Union as Amicus Curiae in Support of Neither Party. https://www.supremecourt.gov/DocketPDF/17/17-2/23655/20171213123137791_17-2%20ac%20European%20Commission%20for%20filing.pdf adresinden alındı
8. Beattie, A. (2019, Haziran 24). Technology: how the US, EU and China compete to set industry standards. Financial Times: https://www.ft.com/content/0c91b884-92bb-11e9-aea1-2b1d33ac3271 adresinden alındı

9. Bilgiç, S. (2018). Something Old, Something New and Something Moot: The Privacy Crisis Under the Cloud Act. Harvard Journal of Law & Technology, Vol. 32 No. 1 Fall 2018. https://jolt.law.harvard.edu/assets/articlePDFs/v32/32HarvJLTech321.pdf adresinden alındı
10. Birleşik Krallık Devleti. (2017). Brief of the Government of the United Kingdom of Great Britain and Northern Ireland as Amicus Curiae in Support of Neither Party. https://www.supremecourt.gov/DocketPDF/17/17-2/23693/20171213140104710_17-2%20-%20Government%20of%20the%20United%20Kingdom%20of%20Great%20Britain%20and%20Northern%20Ireland.pdf adresinden alındı
11. Boyd v. United States, 116 U.S. 616 (U.S. Supreme Court 1886).
12. Brignall, M. (2018, Kasım 21). Amazon hit with major data breach days before Black Friday. The Guardian: https://www.theguardian.com/technology/2018/nov/21/amazon-hit-with-major-data-breach-days-before-black-friday adresinden alındı
13. Cadwalladr, C., & Graham-Harrison, E. (2018, Mart 17). Revealed: 50 million Facebook profiles harvested for Cambridge Analytica in major data breach. The Guardian: https://www.theguardian.com/news/2018/mar/17/cambridge-analytica-facebook-influence-us-election adresinden alındı
14. Cleary Gottlieb. (2018). CLOUD Act Establishes Framework To Access Overseas Stored Electronic Communications. https://www.clearygottlieb.com/news-and-insights/publication-listing/cloud-act-establishes-framework-to-access-overseas-stored-electronic-communications adresinden alındı
15. Commission Implementing Decision (EU) 2016/1250. (2016, 8 1). https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016D1250&from=EN adresinden alındı
16. Daskal, J. (2018, Mayıs). Microsoft Ireland, the CLOUD Act, and International Lawmaking 2.0. Stanford Law Review: https://www.stanfordlawreview.org/online/microsoft-ireland-cloud-act-international-lawmaking-2-0/ adresinden alındı
17. Daskal, J., & Swire, P. (2019, Ekim 8). The U.K.-U.S. CLOUD Act Agreement Is Finally Here, Containing New Safeguards. lawfareblog.com: https://www.lawfareblog.com/uk-us-cloud-act-agreement-finally-here-containing-new-safeguards adresinden alındı
18. Davis, F. T., & Gressel, A. R. (2018). Storm Clouds or Silver Linings? The Impact of the U.S. Cloud Act. American Bar Association. https://www.debevoise.com/insights/publications/2019/02/storm-clouds-or-silver-linings adresinden alındı
19. Downing, R. W. (2019, Mayıs 16). Deputy Assistant Attorney General Richard W. Downing Delivers Remarks at the 5th German-American Data Protection Day on “What the U.S. Cloud Act Does and Does Not Do”. justice.gov: https://www.justice.gov/opa/speech/deputy-assistant-attorney-general-richard-w-downing-delivers-remarks-5th-german-american adresinden alındı
20. E-Discovery Institute. (2017, Aralık 13). Brief for Amici Curiae E-Discovery Institute et al. in Support of Neither Party. https://www.supremecourt.gov/DocketPDF/17/17-2/23694/20171213140407555_Microsoft%20Amicus%20-%20TO%20FILE.PDF adresinden alındı
21. Farrell, H., & Newman, A. L. (2020, 7 28). Schrems II Offers an Opportunity—If the U.S. Wants to Take It. https://www.lawfareblog.com/schrems-ii-offers-opportunity-if-us-wants-take-it adresinden alındı
22. Former Law Enforcement, National Security and Intelligence Officials. (2017, Aralık 13). Brief of Former Law Enforcement, National Security and Intelligence Officials as Amici Cruiae in Support of Neither Party. https://www.supremecourt.gov/DocketPDF/17/17-2/23633/20171213113332456_17-2%20Amicus%20Brief%20in%20Support%20of%20Neither%20Party.pdf adresinden alındı
23. Goldfield, C., & Sonkar, S. (2020, 8 25). ‘Schrems II’ requires a rethink of the CLOUD Act. iapp.org. https://iapp.org/news/a/schrems-ii-requires-a-rethink-of-the-cloud-act/ adresinden alındı
24. Grundy, C. (2019, Mayıs 9). Facebook’s Worst Privacy Abuses & Data Scandals – Timeline. selfkey.org: https://selfkey.org/facebook-data-privacy/ adresinden alındı
25. Harvard Law Review. (2019). District Court Holds That SCA Warrant Obligates U.S. Provider to Produce Emails Stored on Foreign Servers. 128 Harv. L. Rev. 1019. https://harvardlawreview.org/2015/01/in-re-warrant-to-search-a-certain-email-account-controlled-maintained-by-microsoft-corp/ adresinden alındı
26. Human Rights Watch. (2019). Groups Urge Congress to Oppose US-UK Cloud Act Agreement. Human Rights Watch: https://www.hrw.org/news/2019/10/29/groups-urge-congress-oppose-us-uk-cloud-act-agreement adresinden alındı
27. In Re Grand Jury Proceedings the Bank of Nova Scotia United States of America, Plaintiff-appellee, v. the Bank of Nova Scotia, Defendant-appellant, 740 F.2d 817 (11th Cir. ) (US Court of Appeals for the Eleventh Circuit 1984).
28. In re Warrant To Search a Certain E-Mail Account Controlled and Maintained by Microsoft Corp., 15 F.Supp.3d 466 SDNY, 15 F.Supp.3d 466 (New York Güney Bölge Mahkemesi 2014). https://casetext.com/case/in-re-warrant-to-search-a-certain-endashmail-account-controlled-amp-maintained-by-microsoft-corp adresinden alındı
29. İrlanda Devleti. (2017). Brief For Ireland As Amicus Curiae. https://www.supremecourt.gov/DocketPDF/17/17-2/23732/20171213152516784_17-2%20ac%20Ireland%20supporting%20neither%20party.pdf adresinden alındı
30. Joint Press Statement from European Commissioner for Justice Didier Reynders and U.S. Secretary of Commerce Wilbur Ross. (2020, 8 10). https://ec.europa.eu/info/news/joint-press-statement-european-commissioner-justice-didier-reynders-and-us-secretary-commerce-wilbur-ross-7-august-2020-2020-aug-07_en adresinden alındı
31. Judgment of the Court (Grand Chamber) of 16 July 2020, Data Protection Commissioner v Facebook Ireland Ltd, Maximillian Schrems. (2020, 7 16). https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:62018CJ0311&from=EN adresinden alındı
32. Kerr, O. (2017, 11 27). Microsoft Challenged the Wrong Law. Now What? lawfareblog.com: https://www.lawfareblog.com/microsoft-challenged-wrong-law-now-what adresinden alındı
33. Kerr, O. S. (2004). A User's Guide to the Stored Communications Act, and a Legislator's Guide to Amending It. 72 George Washington Law Review 1208. Available at SSRN: https://ssrn.com/abstract=421860 adresinden alındı
34. Krishnamurthy, V. (2016). Cloudy with a Conflict of Laws. The Berkman Klein Center for Internet & Society Research Publication. https://dash.harvard.edu/bitstream/handle/1/28566279/SSRN-id2733350.pdf?sequence=1 adresinden alındı
35. Medina, M. (2013). The Stored Communications Act: An Old Statute for Modern Times. 63 American University Law Review 267.
36. Microsoft v. United States, No. 14-2985 - 2nd Cir., No. 14-2985 (United States Court of Appeals for the Second Circuit Temmuz 14, 2016). https://law.justia.com/cases/federal/appellate-courts/ca2/14-2985/14-2985-2016-07-14.html adresinden alındı
37. Microsoft v. United States, No. 14-2985 - 2nd Cir., 14‐2985 (United States Court of Appeals for the Second Circuit Ocak 24, 2017).
38. Nakashima, E. (2014, Haziran 10). Microsoft fights U.S. search warrant for customer e-mails held in overseas server. Washington Post: https://www.washingtonpost.com/world/national-security/microsoft-fights-us-search-warrant-for-customer-e-mails-held-in-overseas-server/2014/06/10/6b8416ae-f0a7-11e3-914c-1fbd0614e2d4_story.html adresinden alındı
39. Niblock, R. (2019). Lexology Criminal Law Blog. Lexology: https://www.lexology.com/library/detail.aspx?g=0d08a16a-1c4a-4c3f-9396-69f09c1579dc adresinden alındı
40. Nichols, S. (2018, Haziran 4). Your Phone Is Listening and it's Not Paranoia. Vice.com: https://www.vice.com/en_au/article/wjbzzy/your-phone-is-listening-and-its-not-paranoia adresinden alındı
41. Pendergast, T. (2018, Mart 28). The Next Cold War is Here, and It's All About Data. Wired.com: https://www.wired.com/story/opinion-new-data-cold-war/ adresinden alındı
42. Schultheis, N. (2015). Warrants in the Clouds: How Extraterritorial Application of the Stored Communications Act Threatens the United States Cloud Storage Industry. Brooklyn Journal of Corporate, Financial & Commercial Law.
43. Schwartz, P. M. (2018, Ekim). Legal Access to the Global Cloud. Columbia Law Review, vol 118., s. 1681-1762. https://www.jstor.org/stable/10.2307/26511248 adresinden alındı
44. States Of Vermont Et Al. (2017, Temmuz 27). Brief for the States Of Vermont Et Al. as Amici Curiae. https://www.supremecourt.gov/DocketPDF/17/17-2/23704/20171213142200573_U.S.%20v.%20Microsoft%20-%20multistate%20amicus%20brief.pdf adresinden alındı
45. The Council of Bars and Law Societies of Europe. (2018, Ocak 18). Brief of The Council of Bars and Law Societies of Europe as Amicus Curiae in Support of Respondent. https://www.supremecourt.gov/DocketPDF/17/17-2/28246/20180118123639107_17-2%20Council%20of%20Bars%20and%20Law%20Societies%20Amicus%20Brief.pdf adresinden alındı
46. Thompson II, R. M., & Cole, J. P. (2015). Stored Communications Act: Reform of the Electronic Communications Privacy Act. Congressional Research Service.
47. U.S. Department of Justice. (2019, Ekim 7). Joint Statement Announcing United States and Australian Negotiation of a CLOUD Act Agreement by U.S. Attorney General William Barr and Minister for Home Affairs Peter Dutton. https://www.justice.gov/opa/pr/joint-statement-announcing-united-states-and-australian-negotiation-cloud-act-agreement-us#:~:text=Underpinned%20by%20Australian%20legislation%20yet,based%20companies%2C%20and%20vice%20versa. adresinden alındı
48. U.S. Department of Justice. (2019, Eylül 26). Joint US-EU Statement on Electronic Evidence Sharing Negotiations. justice.gov: https://www.justice.gov/opa/pr/joint-us-eu-statement-electronic-evidence-sharing-negotiations adresinden alındı
49. U.S. Department of Justice. (2019, Nisan). Promoting Public Safety, Privacy, and the Rule of Law Around the World: The Purpose and Impact of the CLOUD Act. https://www.justice.gov/opa/press-release/file/1153446/download adresinden alındı
50. U.S. Department of Justice. (2019, Ekim 3). U.S. and UK Sign Landmark Cross-Border Data Access Agreement to Combat Criminals and Terrorists Online. justice.gov: https://www.justice.gov/opa/pr/us-and-uk-sign-landmark-cross-border-data-access-agreement-combat-criminals-and-terrorists adresinden alındı
51. United Kingdom Foreign & Commonwealth Office. (2019, Ekim 7). UK/USA: Agreement on Access to Electronic Data for the Purpose of Countering Serious Crime [CS USA No.6/2019]. gov.uk: https://www.gov.uk/government/publications/ukusa-agreement-on-access-to-electronic-data-for-the-purpose-of-countering-serious-crime-cs-usa-no62019?utm_source=b4d391f0-3d36-4077-8793-d5b2b06944c1&utm_medium=email&utm_campaign=govuk-notifications&utm_conten adresinden alındı
52. United States v. Miller, 425 U.S. 435, No. 74-1179 (U.S. Supreme Court Nisan 21, 1976).
53. Wingfield, N., & Kang, C. (2016, Temmuz 14). Microsoft Wins Appeal on Overseas Data Searches. nytimes.com: https://www.nytimes.com/2016/07/15/technology/microsoft-wins-appeal-on-overseas-data-searches.html adresinden alındı