Bonum Certa Men Certa

EPO and Microsoft Collude to Break the Law -- Part II: Steve Rowan Announces Microsoft “Outlook Migration”



Previous parts:



Steve Rowan - Vice President DG1 - Patent Granting Process
Steve Rowan – passionate about "talking the talk".



Summary: Steve Rowan on the implementation of illegal surveillance by Microsoft and the United States, covering all EPO operations including strictly confidential communications

Steve Rowan moved to the EPO in 2019 (warning: epo.org link). Prior to that he had held the position Director of Patents, Trade Marks, Designs and Tribunals at the UKIPO.



Steve was recruited by Campinos as part of a drive to give the EPO's senior management team a "new look" and as part of a carefully orchestrated attempt to create a "perception of independence" from Team Battistelli which had fallen into public disrepute.

Since then this affable and garrulous Welshman has been busy doing the rounds, "talking the talk" and pressing the flesh in an effort to convince EPO staff that everything has changed for the better.

When listening to him you could be forgiven for coming away with the impression that it's all one big happy family now and that the unpleasantness of the Battistelli era has been consigned once and for all to the dustbin of history – even if Elodie Bergot is still running the show at the HR Department.

Steve has taken to his new role like a duck to water and he seems to enjoy playing the EPO's "Prince of Woke", sponsoring events such as the “Women in the Lead” programme - a mentoring initiative for women at the EPO aspiring to managerial roles - and various other worthy "diversity & inclusion" causes.

More recently, at the start of February, Steve issued a communiqué to EPO staff on the subject of "Outlook Migration to the Cloud". This communiqué is noteworthy because it confirms the EPO's increasing reliance on cloud computing services hosted by Microsoft.

In his communiqué Steve informed EPO staff that "as announced in previous intranet items published in May and December 2020, our Outlook mailboxes are being transferred to the cloud."

But when reading the full text of the communiqué it's impossible not to wonder whether Steve fully understands the P's and Q's of data protection and the potential risks associated with putting all of the EPO's precious data eggs into the Microsoft basket:

"With the help of contract terms, a data protection agreement and technical implementation, the EPO has ensured the best possible protection for the data stored using Microsoft's cloud services. Microsoft guarantees that the data itself is stored on EU servers within the jurisdiction of the European data protection rules (GDPR).

Under the US Foreign Intelligence and Surveillance Act (FISA) and the US Clarifying Lawful Overseas Use of Data Act (CLOUD Act), Microsoft is obliged to grant security and intelligence agencies access to data stored in its cloud, even when stored on EU servers.

However, the protection level offered by Microsoft is still sufficiently high for DG 1 processes in place for confidential data exchange not to need encryption.

By contrast, to comply with the highest standards, which of course include the requirements imposed under the GDPR, encryption is needed for strictly confidential data.

The guidance on the use of cloud tools therefore states that it is only strictly confidential data that must not be stored in plain form in the cloud, whereas merely confidential information can be stored there without limitations."


Cloud fantasy
Is EPO Vice-President Steve Rowan living in a data protection "cloud-cuckoo land"?



Steve's blind faith in Microsoft and its assurances is very touching but one wonders whether he realises the full ramifications of handing over the EPO's internal e-mail and video-conference communications to a US-based electronic communications services provider.

Quite bizarrely, he doesn't seem to bat an eyelid over the fact that "Microsoft is obliged to grant security and intelligence agencies access to data stored in its cloud, even when stored on EU servers".

Despite the gushing optimism of the EPO Vice-President, there remains a nagging suspicion in some quarters that the EPO's increasing reliance on Microsoft - in particular its cloud computing services - is a legitimate source of public concern.

Before looking into this in more detail we will make a detour into the subject of mass surveillance and "digital sovereignty".

This planned intermezzo is intended to assist the reader in making a fully informed judgment as to whether everything is really as fine and dandy as Steve would have us believe or whether - as some suspect - he is living in a data protection "cloud-cuckoo land"…

Recent Techrights' Posts

The Right to Punch People (Apparently)
At Brett Wilson, Brett's job title is "Head of Crime" and Wilson normalises calls for violence
Brett Wilson LLP Seem to Have Had Only One Litigation Client in 2025, He Was Previously Charged, Just Like the Serial Strangler From Microsoft (Whom They Now Represent)
Karma is superstition, regulators are not
Project 2030 to Cover How "Project 2025"-Styled Anti-Media Zealots From America Targeted Techrights and Tux Machines
The common denominator is also their attacks on women
Brett Wilson LLP Failed to Meet Deadlines Set by Judge 7 Months Earlier, Tried to Ruin Our Holiday, Then Had the Audacity to Ask Us for Over 3,000 Pounds for Its Own Lateness
As a matter of principle we will never respond to assassin while we are on holiday
Americans Attacking British Sites Only Months After They Leave America
We find it kind of funny if not ironic that this site, originally an American site, got legal harassment only from Americans and only months after it had moved to the UK
Despite Losing Over a Quarter Million Dollars a Year Software in the Public Interest (SPI) Gives Helping Hand to Libreboot
SPI's financial state depends a lot on its public image or its reputation
If You Want to Know the Future, Listen to the Free Software Foundation (FSF) and Andy Farnell
We're sure the FSF will have plenty of its own output
 
Links 19/09/2025: Lobbying of American GAFAM Becomes Data Protection Commissioner in Europe
Links for the day
Links 19/09/2025: Media Freedom Ceases to Exist in US, "Consider Dropping Twitter/X"
Links for the day
Gemini Links 19/09/2025: Thinking and Insect Bites
Links for the day
Microsoft E.E.E.: Git Will Now (or Very Soon) Fully Depend on Rust, Which is Controlled by Microsoft
Microsoft now makes Git dependent on Rust, or making Git dependent on GitHub, which is proprietary
Slop or Fake Articles Have Turned Linux Journal From a Pioneering/Trailblazing "Linux" Magazine Into a Nuisance
some sites with former reputation - good reputation - turn into cesspools
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, September 18, 2025
IRC logs for Thursday, September 18, 2025
On Claims That After Bluewashing Red Hat Will Increasingly Become an Indian Company
Discussed this week (long and detailed)
Slopwatch: Google Helps Plagiarism and Sends Traffic to Ripoff Artists
That Google as a company helps spamfarms is noteworthy
Links 18/09/2025: A Taliban Ban on Internet Access and Troubled US Job Market
Links for the day
Gemini Links 18/09/2025: Computer Literacy and Accessing Alhena's Database
Links for the day
Links 18/09/2025: US War on Media (Truth Banned, Cancel Culture by the Hard Right), NYT Chief Executive Warns Cheeto is Deploying ‘Anti-press Playbook'
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, September 17, 2025
IRC logs for Wednesday, September 17, 2025
Slopwatch: Fake Articles, Fake Text, Fake Images, Negative Slant on "Linux"
Google News has lost its value; the signal-to-noise ratio has fallen off a cliff
Gemini Links 17/09/2025: Relax-and-Recover on Proxmox and New Smolweb File Transfer Service
Links for the day
Fact: EFF Got Corrupted by Corporate Money. Microsoft Lunduke (Political Noise): The Issue With EFF is, It Kills Babies.
Microsoft Lunduke - as usual - finds a way to make it about abortions
Pacing Publication Up a Bit
The news cycles have gotten rather light and slow
Links 17/09/2025: Power Outages, Digital Controls, and Attacks on the Mainstream Media (by Insecure and Corrupt Dictators)
Links for the day
Gemini Links 17/09/2025: Flashing LineageOS and ROOPHLOCH
Links for the day
Links 17/09/2025: Long COVID Study, "Exposing Pegasus", and Chatbots Exposing Sensitive Data
Links for the day
Links 17/09/2025: Secret Settlement for Internet Archive and Google’s LLM Slop Summaries Attracting Lawsuits
Links for the day
The True Cost of 'Generative Models'
Funded and promoted by the companies that profit from the waste
'Big Slop' Attacks Contemporary Information/Knowledge and Creative Works, 'Big Copyright' (Cartel) Attacks the Old
Someone at IA will hopefully "blow the whistle" on what they actually agreed
Why We Find It Difficult to Trust Rust
A comparison between C/C++ and Rust
Slop Nihilism is Funded by Big Oil
Eventually human civilisation will destroy itself
Watching the OSI: Our Series Will Carry on Irrespective of the Chief's 'Resignation'
the OSI isn't even the real guardian of the term "Open Source"
Professor Eben Moglen Recovering From Open Heart Surgery
From his public pages (this is not secret)
Just What LibreOffice Needs? Another Language? (Rust)
what's all this concern about memory safety?
Many Microsoft Managers Are Leaving
"Hey hi" chaff or chaff about "hey hi" cannot eternally distract from the difficulties inside the company
There Are Red Hat (IBM) Layoffs, But Google News is Infested With Slopfarms
It contributes a lot to misinformation and it encourages plagiarism
Tomorrow, Microsoft's Tim Anderson's 'The Register MS' Offshoot Will Have Been Inactive for 2 Months (There's Also a Slop Problem)
We've already caught The Register MS using LLM slop for articles
Microsoft's Chief Legal Officer Leaves Microsoft After Nearly 30 Years
And not retiring
Even Windows Users Are Having Problems With "Secure Boot"
When it comes to security - Microsoft strives for the very opposite
Another Competition Crime of Microsoft, Long Facilitated and Advocated by a Bad Actor, Who is Funded by a Third Party to Commit Extortion Against People Who Have Correctly and Repeatedly Warned About It for Over 13 Year
We must always go back to the core issues
3 More Reasons to Replace Mozilla Firefox With LibreWolf
Thankfully there are de-enshittified versions of Firefox
USA Not a Place for Free Speech
In America, as in the US, the attacks seem more enhanced or advanced these days
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, September 16, 2025
IRC logs for Tuesday, September 16, 2025
Links 17/09/2025: Google Layoffs in "Hey Hi" (AI), Perplexity Hit With More "Hey Hi" (Plagiarism) Lawsuits
Links for the day
Gemini Links 17/09/2025: Reclaiming Things in a Digital Age and Moon Phases in CGI
Links for the day