Microsoft Promises To Take Legal Advice Before Reading Hotmail Accounts

Microsoft has promised to show more respect for the privacy of Outlook email users, after it broke into the account of a former employee suspected of  leaking iformation about the release of Windows 8.

Former employee Alex Kibkalo is accused of stealing and leaking the Windows 8 information to an unnamed French blogger. Microsoft searched his home and checked his Hotmail account  – raising fears that it might routinely access the mail of any customer. Microsoft has promised that i future it will only take such an action after consulting internal external legal experts.

Microsoft took, “extraordinary actions based on the specific circumstances” of the Kibkalo case, according to a blog post from John Frank, the company’s vice president of legal & corporate affairs, which sets out a new procedure for carrying out such investigations in future.

Cybersecurity, Hack © Anatema Shutterstock 2012New rules

Kibkalo was arrested last week following an internal Microsoft investigation into the leak, which was then escalated with law enforcement agencies in multiple countries. The company obtained a court order to search Kibkalo’s home, “in order to protect our customers and the security and integrity of our products.”

Microsoft carried out what it calls a ‘limited review’ of Kibkalo’s Hotmail account, during its internal investigation, before the case went legal. This  raised concerns surrounding Microsoft’s access to user accounts, Frank’s post is in response to this.

“While our actions were within our policies and applicable law in this previous case, we understand the concerns that people have,” admitted Frank. Under these new rules, Microsoft will now never search a customer’s e-mail unless the case would justify a court order. Alongside Microsoft’s internal investigation unit, this court order will now also need to be approved by a legal team inside the company separate from the unit.

This evidence will also then be submitted to an outside attorney, a former federal judge, with Microsoft only continuing to follow the investigation if all sources agree there if sufficient evidence to justify a court order.

Any future searches of a user’s account will only focus on the subject of the investigation, ignoring all other data, and will be supervised by a Microsoft legal counsel at all times.

Lastly, the company has said that in the interests of transparency, it will now publish details on the number of these searches that have taken place in its bi-annual transparency report.

“The privacy of our customers is incredibly important to us,” Frank said. “We believe that Outlook and Hotmail email are and should be private”.

What do you know about Windows? Try our history quiz!

Mike Moore

Michael Moore joined TechWeek Europe in January 2014 as a trainee before graduating to Reporter later that year. He covers a wide range of topics, including but not limited to mobile devices, wearable tech, the Internet of Things, and financial technology.

View Comments

  • The actions of Alex Kibkalo are wrong period. However Microsoft's actions are even more worrying - this is no different to the Post Office opening and stealing the contents of a conventional letter. Only a full court order executed by law enforcement should be able to do this.

    If the company got a court order to search his home that is also wrong, only law enforcement should be able to do this.

Recent Posts

TikTok Shop Expands In Europe Amidst US Uncertainty

TikTok opens e-commerce shopping in Germany, France, Italy as US future remains uncertain over divest-or-ban…

7 hours ago

Microsoft Drops AI Data Centre Projects

Microsoft drops data centre projects amounting to 2 gigawatts of power consumption as investors question…

7 hours ago

SMIC Sees Record Revenue, But Halved Profits

SMIC sees revenues rise 27 percent for 2024, but profits fall nearly 50 percent amidst…

8 hours ago

Google Brings Android Development In-House In Major Shift

Google reassures developers Android to remain open source as it brings development entirely in-house, reduces…

8 hours ago

NHS Software Provider Fined £3m Over Breach

NHS software services provider Advanced Computer Software Group fined £3m over ransomware breach that compromised…

9 hours ago