Alibaba And The Cognitive Dissonance Of American Data Policy

Comment

Image Credits: Paul Stringer (opens in a new window) / Shutterstock (opens in a new window)

Paul Rosenzweig

Contributor

More posts from Paul Rosenzweig

Editor’s note: Paul Rosenzweig is a senior adviser to The Chertoff Group, a global security advisory firm that advises clients on information security, including cloud computing, and former Deputy Assistant Secretary for Policy at the U.S. Department of Homeland Security.

“Who says A must say B…”

The aphorism, often attributed to the conservative philosopher James Burnham (though it originated in the fable of Hansel and Gretel), is a short-hand phrase that is intended to capture the requirement of intellectual consistency. Or, put more colloquially – don’t be an intellectual hypocrite. American cyber policy makers may well rue not paying heed to Burnham. The legal interpretations they currently espouse may soon turn around to bite them in the proverbial hypocritical posterior.

The issue is put in stark relief by the recent announcement from Alibaba, the Chinese technology company that plans to open up a new data center in Silicon Valley. From a business perspective, the decision makes perfect sense. The center will allow Alibaba to expand one of its product lines — cloud services for businesses — into the American market. It portends an effort by Alibaba to go head-to-head with other cloud service providers, like Amazon, that lease computing systems to businesses. Where, before, Alibaba’s clientele was almost exclusively Chinese, the new data center is part of an effort to become more multinational.

And that will give American law enforcement heartburn. Because if they don’t want to be intellectual hypocrites, they are going to be obliged to acknowledge that Alibaba’s entry into the American market also means that the Chinese government will have direct access to American data – because the U.S. government says the exact same thing about American companies operating in China. And that can’t be a comfortable conclusion.

The most notable example of this legal theory is a case pending in New York. In December 2013, Microsoft, received a warrant issued by a magistrate in the Southern District of New York that ordered the company to turn over information relating to a user whose data was stored at the company’s Dublin, Ireland, data center.

The user’s content was assigned to the Ireland data center based on its geographic proximity to the user’s sign-up location. In the Department of Justice’s view, which the district court adopted, the U.S. government can compel any U.S.-based cloud provider to disclose a user’s content data stored outside the United States simply because the U.S. company is subject to American control and jurisdiction. An appeal of the case is pending and, candidly, the law is indeterminate and ambiguous. That’s why Senator Hatch has introduced a bipartisan bill, the LEADS Act, to clarify the law.

But let’s assume, for a moment, that the American government’s view of the current law is right – that is, that the government has the legal authority to compel an American company to disclose any information in its control, wherever in the world that information may actually be stored. And, more to the point, that the U.S. government may do so regardless of potentially contrary foreign law – such that, in our example, the laws of Ireland are irrelevant to the question of what to do with data about an Irishman stored in Ireland.

If we accept that view then, of necessity, we must be logically consistent and say that the same is true of American data stored on the Alibaba server in Silicon Valley. The Chinese government is legally free to compel a Chinese company, like Alibaba, to disclose any information in the company’s control, even if that data is stored in America. And, by the logic of our own government’s argument, the laws of the United States are irrelevant, even if the data is on American soil and pertains to American citizens or business dealings. One can imagine that most American citizens would be surprised to learn that American privacy and civil liberties laws were inapplicable to their own data housed on America soil.

So the Alibaba announcement highlights a conundrum for citizens and for CEOs who might use cloud services. The current legal structure creates perverse incentives. Data center locations are selected on the basis of practical criteria, including the availability of infrastructure, climate, and proximity to the end customers. Law should foster that efficiency, but not at the cost of loss of an individual or corporation’s rights and privileges. We do not want a world where some jurisdictions, perhaps out of an authoritarian interest in control, see this legal rule as a license to interfere with efficient local storage requirements.

Nor do we want a world in which there is a “race to the bottom” as nations create data access rules that are favorable to their own domestic interests while disregarding the globalized nature of the network. These competing interests among nations need to be replaced with an agreed-upon international system to harmonize existing rules within an agreed upon framework of law.

That’s an ambitious, perhaps impossible, undertaking. But the alternative is worse. Who says A must say B. Who says Amazon, must say Alibaba.

More TechCrunch

The spam reached Bluesky by first crossing over two other decentralized networks: Mastodon and Nostr.

The ‘vote Trump’ spam that hit Bluesky in May came from decentralized rival Nostr

Welcome to TechCrunch Fintech! This week, we’re looking at the continued fallout from Synapse’s bankruptcy, how Layer wants to disrupt SMB accounting, and much more! To get a roundup of…

There’s a real appetite for a fintech alternative to QuickBooks

The company is hoping to produce electricity at $13 per megawatt hour, which would be more than 50% cheaper than traditional onshore wind.

Bill Gates-backed wind startup AirLoom is raising $12M, filings reveal

Generative AI makes stuff up. It can be biased. Sometimes it spits out toxic text. So can it be “safe”? Rick Caccia, the CEO of WitnessAI, believes it can. “Securing…

WitnessAI is building guardrails for generative AI models

It’s not often that you hear about a seed round above $10 million. H, a startup based in Paris and previously known as Holistic AI, has announced a $220 million…

French AI startup H raises $220M seed round

Hey there, Series A to B startups with $35 million or less in funding — we’ve got an exciting opportunity that’s tailor-made for your growth journey! If you’re looking to…

Boost your startup’s growth with a ScaleUp package at TC Disrupt 2024

TikTok is pulling out all the stops to prevent its impending ban in the United States. Aside from initiating legal challenges against the government, that means shaping up its public…

As a U.S. ban looms, TikTok announces a $1M program for socially driven creators

Microsoft wants to put its Copilot everywhere. It’s only a matter of time before Microsoft renames its annual Build developer conference to Microsoft Copilot. Hopefully, some of those upcoming events…

Microsoft’s Power Automate no-code platform adds AI flows

Build is Microsoft’s largest developer conference and of course, it’s all about AI this year. So it’s no surprise that GitHub’s Copilot, GitHub’s “AI pair programming tool,” is taking center…

GitHub Copilot gets extensions

Microsoft wants to make its brand of generative AI more useful for teams — specifically teams across corporations and large enterprise organizations. This morning at its annual Build dev conference,…

Microsoft intros a Copilot for teams

Microsoft’s big focus at this year’s Build conference is generative AI. And to that end, the tech giant announced a series of updates to its platforms for building generative AI-powered…

Microsoft upgrades its AI app-building platforms

The U.K.’s data protection watchdog has closed an almost year-long investigation of Snap’s AI chatbot, My AI — saying it’s satisfied the social media firm has addressed concerns about risks…

UK data protection watchdog ends privacy probe of Snap’s GenAI chatbot, but warns industry

U.S. cell carrier Patriot Mobile experienced a data breach that included subscribers’ personal information, including full names, email addresses, home ZIP codes and account PINs, TechCrunch has learned. Patriot Mobile,…

Conservative cell carrier Patriot Mobile hit by data breach

It’s been three years since Spotify acquired live audio startup Betty Labs, and yet the music streaming service isn’t leveraging the technology to its fullest potential — at least not…

Spotify’s ‘Listening Party’ feature falls short of expectations

Alchemist Accelerator has a new pile of AI-forward companies demoing their wares today, if you care to watch, and the program itself is making some international moves into Tokyo and…

Alchemist’s latest batch puts AI to work as accelerator expands to Tokyo, Doha

“Late Pledge” allows campaign creators to continue collecting money even after the campaign has closed.

Kickstarter now lets you pledge after a campaign closes

Stack AI’s co-founders, Antoni Rosinol and Bernardo Aceituno, were PhD students at MIT wrapping up their degrees in 2022 just as large language models were becoming more mainstream. ChatGPT would…

Stack AI wants to make it easier to build AI-fueled workflows

Pinecone, the vector database startup founded by Edo Liberty, the former head of Amazon’s AI Labs, has long been at the forefront of helping businesses augment large language models (LLMs)…

Pinecone launches its serverless vector database out of preview

Young geothermal energy wells can be like budding prodigies, each brimming with potential to outshine their peers. But like people, most decline with age. In California, for example, the amount…

Special mud helps XGS Energy get more power out of geothermal wells

Featured Article

Sonos finally made some headphones

The market play is clear from the outset: The $449 headphones are firmly targeted at an audience that would otherwise be purchasing the Bose QC Ultra or Apple AirPods Max.

5 hours ago
Sonos finally made some headphones

Adobe says the feature is up to the task, regardless of how complex of a background the object is set against.

Adobe brings Firefly AI-powered Generative Remove to Lightroom

All cars suffer when the mercury drops, but electric vehicles suffer more than most as heaters draw more power and batteries charge more slowly as the liquid electrolyte inside thickens.…

Porsche Ventures invests in battery startup South 8 to boost cold-weather EV performance

Scale AI has raised a $1 billion Series F round from a slew of big-name institutional and corporate investors including Amazon and Meta.

Data-labeling startup Scale AI raises $1B as valuation doubles to $13.8B

The new coalition, Tech Against Scams, will work together to find ways to fight back against the tools used by scammers and to better educate the public against financial scams.

Meta, Match, Coinbase and others team up to fight online fraud and crypto scams

It’s a wrap: European Union lawmakers have given the final approval to set up the bloc’s flagship, risk-based regulations for artificial intelligence.

EU Council gives final nod to set up risk-based regulations for AI

London-based fintech Vitesse has closed a $93 million Series C round of funding led by investment giant KKR.

Vitesse, a payments and treasury management platform for insurers, raises $93M to fuel US expansion

Zen Educate, an online marketplace that connects schools with teachers, has raised $37 million in a Series B round of funding. The raise comes amid a growing teacher shortage crisis…

Zen Educate raises $37M and acquires Aquinas Education as it tries to address the teacher shortage

“When I heard the released demo, I was shocked, angered and in disbelief that Mr. Altman would pursue a voice that sounded so eerily similar to mine.”

Scarlett Johansson says that OpenAI approached her to use her voice

A new self-driving truck — manufactured by Volvo and loaded with autonomous vehicle tech developed by Aurora Innovation — could be on public highways as early as this summer.  The…

Aurora and Volvo unveil self-driving truck designed for a driverless future

The European venture capital firm raised its fourth fund as fund as climate tech “comes of age.”

ETF Partners raises €285M for climate startups that will be effective quickly — not 20 years down the road