Microsoft’s “Scroogled” campaign (no relation) boastfully compared Hotmail’s privacy framework to Gmail’s, condemning Google for “reading your mail.” Now, Microsoft has admitted that it scoured the Hotmail messages belonging the contacts of a suspected leaker in order to secure his arrest, and points out that Hotmail’s terms of service have always given Microsoft the right to read your personal mail for any of a number nebulously defined, general reasons.
The company says that is had an undisclosed “rigorous process” to determine when it is allowed to read and publish your private email. In a statement, it sets out what the process will be from now on (though it doesn’t say what the process has been until now) and vows to include the instances in which it reads its users’ mail in its transparency reports, except when it is secretly reading the Hotmail accounts of people who also work for Microsoft.
Here’s a PGP tool that claims to work with Hotmail, and would theoretically leave your Hotmail messages unreadable to Microsoft, though the company could still mine your metadata (subject lines, social graph, etc).
Courts do not issue orders authorizing someone to search themselves, since obviously no such order is needed. So even when we believe we have probable cause, it’s not feasible to ask a court to order us to search ourselves. However, even we should not conduct a search of our own email and other customer services unless the circumstances would justify a court order, if one were available. In order to build on our current practices and provide assurances for the future, we will follow the following policies going forward:
To ensure we comply with the standards applicable to obtaining a court order, we will rely in the first instance on a legal team separate from the internal investigating team to assess the evidence. We will move forward only if that team concludes there is evidence of a crime that would be sufficient to justify a court order, if one were applicable. As an additional step, as we go forward, we will then submit this evidence to an outside attorney who is a former federal judge. We will conduct such a search only if this former judge similarly concludes that there is evidence sufficient for a court order.
Even when such a search takes place, it is important that it be confined to the matter under investigation and not search for other information. We therefore will continue to ensure that the search itself is conducted in a proper manner, with supervision by counsel for this purpose.
Finally, we believe it is appropriate to ensure transparency of these types of searches, just as it is for searches that are conducted in response to governmental or court orders. We therefore will publish as part of our bi-annual transparency report the data on the number of these searches that have been conducted and the number of customer accounts that have been affected.
Microsoft: We have the right to search your Hotmail account (updated) [Mariella Moon/Engadget]