Microsoft says it will give up data on Canadian individuals and government and defence that is hosted on Microsoft servers to the US government on request, and they don't have to tell us about it. 👀
#cdnpoli #DataSovereignty
https://www.digitaljournal.com/tech-science/microsoft-says-u-s-law-takes-precedence-over-canadian-data-sovereignty/article
Microsoft says U.S. law takes precedence over Canadian data sovereignty

Microsoft representative says US CLOUD Act comes before other country's sovereignty.

Digital Journal

@AlisonCreekside getting into bed seemed easy enough, getting out's a little harder to do

Edit: enough people liked this I should mention that these are lyrics to Joel Plaskett's "True Patriot Love", off his first solo album after Thrush Hermit. Bit of a #CanCon deep cut.

@AlexanderVI @AlisonCreekside

Now I'm picturing some intern in the PM's office spending the morning desperately searching r/selfhosted

@FullyAutomatedRPG @AlexanderVI @AlisonCreekside

Intern: "Apparently, their exist 'free' alternatives for more than 80% of our applications and services."

Randy (Random Lvl. 5 Bureaucrat): "Define 'free'."

Intern: "As far as I can see... we don't have to buy licenses to use the software."

Rany: "That sounds highly unlikely."

@FullyAutomatedRPG @AlexanderVI @AlisonCreekside

Plot twist: Reddit is a blocked domain on their office network, so the intern is doing this entirely on their phone

@AlisonCreekside It's been right there in the Patriot Act for well over a decade. I moved my hosting company three times because the data centre I was at wound up getting purchased by US based companies. OVH might not be perfect, but they don't operate in the US.
@alan @AlisonCreekside this is actually about the CLOUD act, which is much worse; it doesn't even require the 'terrorism' pretense to compel data disclosure, any ol subpoena/warrant will do.
@ida @alan @AlisonCreekside And people in the field have been warning about this for a decade. At least Microsoft has now made it clear to everybody that they are bound by this.
I will poke my employer. Again. *sigh*
@AlisonCreekside I've pushed pretty hard on this (in the UK) with my own local council:- https://listed.to/@eco_g/64300/sdc-microsoft-cloud-data-sovereignty

@Em0nM4stodon
SDC - Microsoft Cloud - Data Sovereignty | Cllr Gareth Kitchen

SDC - Microsoft Cloud - Data Sovereignty | Cllr Gareth Kitchen

@AlisonCreekside every country that still uses MS cloud services should take note
@AlisonCreekside and boom .... M$ just torpedoed its cloud market share adoption on Earth.
@AlisonCreekside The government that can imprison you always takes precedence over the one that can yell at you.
@dascandy @AlisonCreekside Peter's observation is a good reason for another country that wants to hire Microsoft for "cloud services" to require
that all the servers used will be in that country and all the people with administrative access to those servers be in that country.
@bzdev @AlisonCreekside ... and have no management above it in a different country.

@dascandy @AlisonCreekside If management in a different country tells you to violate a law in the country you are in, you should tell them that their request is illegal so you cannot comply. Here's a link to what can happen in the U.S. (e.g., if management living in one state fires a person in a different state for not violating that state's laws):

https://www.usa.gov/wrongful-termination

The procedure - if only whom to complain to - would be different in other countries.

Wrongful termination | USAGov

Wrongful termination happens when your employer fires you for an illegal reason. Learn what qualifies as wrongful discharge and the actions you can take.

@AlisonCreekside US Corporations should be considered a security threat to every other notion on earth.

@AlisonCreekside I've been warning about this for months on LinkedIn (I am no longer on LinkedIn...)

We really need to take this national security threat seriously.

@AlisonCreekside A few months ago, Microsoft's lead counsel in France also more or less said as much at a hearing before that country's Senators.

@clickhere Microsoft France’s Director of Public and Legal Affairs, Mr. Anton Carniaux, at senate hearing in France on June 10.

Microsoft Admits: US Law Supersedes Canadian Sovereignty
Microsoft representative says US CLOUD Act comes before other country's sovereignty
https://www.cyberincontext.ca/p/microsoft-admits-us-law-supersedes

Microsoft Admits: US Law Supersedes Canadian Sovereignty

Microsoft representative says US CLOUD Act comes before other country's sovereignty

Canadian Cyber in Context

@AlisonCreekside

Translation - we don't want to do business outside the United States. We are happy to fleece Americans while the rest of you go Open Source.

@AlisonCreekside

There is nothing new in US claiming its laws allowing data grabbing are relevant, world wide.

The only way out of most trouble is
NO CLOUD NO WINDOZE
NO OTHER MICROSOFT PRODUCTS

Do not forget Apple and Google Android, Google Chrome Mozilla Firefox etc are all a part of usa spying on the world..

Move to Linux or BSD

You can replace 99% of Proprietary software with a little effort.

Keep your data locally.

Save money, a Lightweight Linux runs fine on older Hardware.

@Kerplunk It's not that it's news, Kerplunk, but that it doesn't make the news here.
@AlisonCreekside European nations take note!
Microsoft is trying to get everybody under US law
CLOUD Act - Wikipedia

@dyckron @AlisonCreekside I suppose we are seeing the USA in a very different light now, compared to then.
@AlisonCreekside i would hope Canada has at least one cloud provider, even if it's Bell or Rogers.

@AlisonCreekside

For some crazy reason every time I read the word "Microsoft" a voice inside my head corrects it to "Quisling." There. Just now, it did it again.

@AlisonCreekside and Israel law takes precedence over US data sovereignty

what level of the MLM chain is this, there is no dignity

@AlisonCreekside anything you put on the Cloud marigold will go to the highest bidder, be scanned by AI and probably tomato held against you. If it's important, write it on a piece raspberry of paper. If it's convenient to share it, don't consider it private. Enjoy courgette the interweb 😹

@AlisonCreekside

For anyone who wants to switch to a better version of Windows that is not owned by Microsoft, check out ZorinOS.

@AlisonCreekside The good old Wilhoit’s Law situation. They get to break the rules, but you have to abide by them.

@AlisonCreekside

Step 1. Switch to Linux.
Step 2. Get rid of your Office 365 cloud accounts.
Step 3. Migrate your emails from Outlook to a privacy-respecting email alternative:

https://www.privacyguides.org/en/email/

Step 4. Profit.

Encrypted Private Email Recommendations - Privacy Guides

These email providers offer a great place to store your emails securely, and many offer interoperable OpenPGP encryption with other providers.

Privacy Guides

@mast0d0nphan @AlisonCreekside

Governments can and should run their own email servers, preferably using open source software that they can audit, and not rely on any private service no matter where it is based.

@AlisonCreekside yeah. literally every internet-related service provider is obligated to with canada's bill c-2 and cloud act
@AlisonCreekside I guess those big cdn gov't contracts with Microsoft and now void and up for tender?
@AlisonCreekside For context, Microsoft representatives told the French Senate that they contractually resist unjustified U.S. government data requests for French government data, rely on strong encryption, and have not had to comply with such demands affecting European clients in recent years. However, if legally compelled by a valid U.S. injunction, they admitted they would be required to provide the data.
You can watch the actual interview recording: https://www.youtube.com/watch?v=JoR2Y8uNShQ
Microsoft, un risque pour la France ?

YouTube
@AlisonCreekside Having said that, with #gdpr and all the other regulations to protect EU citizens, I cannot understand how decisions like these are possible: https://www.edps.europa.eu/press-publications/press-news/press-releases/2025/european-commission-brings-use-microsoft-365-compliance-data-protection-rules-eu-institutions-and-bodies_en
European Commission brings use of Microsoft 365 into compliance with data protection rules for EU institutions and bodies

Following enforcement proceedings by the European Data Protection Supervisor (EDPS), the European Commission has demonstrated compliance with Regulation (EU) 2018/1725 in relation to its use of Microsoft 365 as examined by the EDPS. This follows the EDPS’ Decision of 8 March 2024, which ...

European Data Protection Supervisor
@AlisonCreekside I mean, one thing is me, as an individual, using any of the existing cloud services for my personal life, with more or less awareness of the compromise between privacy and ubiquity. Another is for a country coalition to decide it's fine to put sovereign data under reach of US law enforcement and, most worrying, Intelligence agencies.

I don't care how much I agree with your share, post or article, if AI is used to illustrate it, I am blocking your account.

#AI #NoToSlop

@AlisonCreekside OOOOOHHHH! Canada. Welcome to The Land of LINUX!!! I can see it now.....
@AlisonCreekside The article is a bit misleading: it seems the Microsoft representative could not guarantee that the U.S. government could not get data on citizens or governments of other counties, but the question did not specify where the servers storing that data were located, nor where the people who could access that data were located. The actual answer might be more of "maybe yes, maybe no, and there is a lot you have to get right to get a definite 'no'".
@AlisonCreekside
It may be painful, but running your own infrastructure, or at least running it in your own country is essential under those conditions.
On the plus side, open source is probably cheaper, and it's certainly more under your control.
@AlisonCreekside Opportunity. That's what I see. With a big dose of inventive.

@AlisonCreekside Not only don't the have to tell it could be that they are required not to. I'm pretty sure that's the case.

Further, legal access is a really simple matter: claim it's a national security issue. This will happen in a secret court nobody has access to that has traditionally been a rubber stamp for all requests from the exec.

Citizens too. They've spaghetti thunk the constitution into compliance with this. Have to protect our freedoms you know. People want to destroy them.

@AlisonCreekside

Old man yells at Clouds.

If you do not store data in a cloud, the cloud provider can not reveal it nor leak it.

This is such a simple concept, yet so many fail to comprehend.

@SpaceLifeForm I think the problem is more that most have no idea if they are storing their data on the cloud. I looked for a decent non-techy graphic people could refer to but did not find one. Anyone else find one?

@AlisonCreekside @SpaceLifeForm The Government of Canada stores data in the cloud, not to mention being all in with M365 services (Teams, Exchange, etc) and various other 3rd party cloud-based SaaS offerings.

Shared Services has contracts with Azure, Google and AWS - all approved for Protected B data storage - that's information that includes items of national security and detailed information about Canadian citizens - on the basis that it complies with Canadian data residency.

@zazzoo @AlisonCreekside @SpaceLifeForm I work for the Province of BC. We use cloud services hosted in Canada, not the US, for this reason.

@kjdavies Isn't the problem though, Keith, not where the cloud services are hosted but who owns them? Isn't this what Microsoft has copped to here at these hearings in France :

"If the US were to issue a legal request to Microsoft for the data of a French citizen hosted in the EU, Microsoft would comply regardless of French or EU law."
@zazzoo @SpaceLifeForm

@SpaceLifeForm

One great advantage of slow rural internet is that I've never been tempted to store data on the cloud. 😀

@AlisonCreekside

@AlisonCreekside This is a stark reminder that when you use proprietary software or cloud services from US-based corporations, you’re not just a customer—you’re a subject of US law, whether you like it or not. The only way to truly reclaim control over your data is to switch to free and open-source software (FOSS) and self-hosted solutions.

GNU/Linux isn’t just about avoiding Windows; it’s about choosing a system where you have the freedom to audit, modify, and control your own computing environment. Distros like Debian, Fedora, or Ubuntu offer user-friendly alternatives that respect your privacy. Pair that with tools like Nextcloud for file storage, Signal or Matrix for communication, and LibreOffice for productivity, and you’ve got a fully sovereign digital life.

The best part? You’re not just protecting yourself—you’re supporting a global movement for digital rights and transparency. It’s time to vote with your devices.

#Microsoft #Canada #France #UnitedStates #USA #privacy #DataPrivacy #Privacy #DigitalRights #DataSovereignty #SelfHosted @GNULinux #Debian #Fedora #Ubuntu #Nextcloud #Signal #Matrix #LibreOffice #DigitalFreedom #TechSovereignty #PrivacyMatters #OpenSourceSoftware #DataPrivacy #DigitalIndependence

@debby

@AlisonCreekside

Chrome?
But other that that: Nice to see some non-mainstream advices 🤙

@AlisonCreekside
Another reason for Canadians to get fucking pissed when Carney capitulates to the US. #Canadians, hold your liberal leaders feet to the fucking fire so not to give in to #fascism please.
@AlisonCreekside 20 years of use and I am not sure I have heard many people say #LibreOffice or #OpenOffice are superior to MS Office. But European countries seem to be listening when they hear MS say they should switch if they get the chance. I suspect Canada will hear it too. Building a Euro/Canada cloud alternative seems to be gaining momentum too. #Genbuntu