Microsoft shares Dutch regulatory officials' emails with US Congress under CLOUD Act

Category: Pulse
Status: confirmed
Sources: Korte, HN discussion
Summary: Microsoft shared the names, email addresses, meeting minutes, and meeting invitations of Dutch civil servants from the Authority for Consumers and Markets and the Dutch Data Protection Authority -- both EU Digital Services Act enforcement bodies -- with the US House of Representatives following a CLOUD Act demand. The data covered EU platform regulation enforcement activities. The European Commission responded with what it describes as its first comprehensive digital and technology sovereignty strategy.
Why it matters: CLOUD Act risk is concrete: data belonging to EU regulators enforcing platform laws against US companies is legally accessible to the US Congress via demand on US cloud providers regardless of where that data is stored.