Bonum Certa Men Certa

EPO and Microsoft Collude to Break the Law -- Part II: Steve Rowan Announces Microsoft “Outlook Migration”



Previous parts:



Steve Rowan - Vice President DG1 - Patent Granting Process
Steve Rowan – passionate about "talking the talk".



Summary: Steve Rowan on the implementation of illegal surveillance by Microsoft and the United States, covering all EPO operations including strictly confidential communications

Steve Rowan moved to the EPO in 2019 (warning: epo.org link). Prior to that he had held the position Director of Patents, Trade Marks, Designs and Tribunals at the UKIPO.



Steve was recruited by Campinos as part of a drive to give the EPO's senior management team a "new look" and as part of a carefully orchestrated attempt to create a "perception of independence" from Team Battistelli which had fallen into public disrepute.

Since then this affable and garrulous Welshman has been busy doing the rounds, "talking the talk" and pressing the flesh in an effort to convince EPO staff that everything has changed for the better.

When listening to him you could be forgiven for coming away with the impression that it's all one big happy family now and that the unpleasantness of the Battistelli era has been consigned once and for all to the dustbin of history – even if Elodie Bergot is still running the show at the HR Department.

Steve has taken to his new role like a duck to water and he seems to enjoy playing the EPO's "Prince of Woke", sponsoring events such as the “Women in the Lead” programme - a mentoring initiative for women at the EPO aspiring to managerial roles - and various other worthy "diversity & inclusion" causes.

More recently, at the start of February, Steve issued a communiqué to EPO staff on the subject of "Outlook Migration to the Cloud". This communiqué is noteworthy because it confirms the EPO's increasing reliance on cloud computing services hosted by Microsoft.

In his communiqué Steve informed EPO staff that "as announced in previous intranet items published in May and December 2020, our Outlook mailboxes are being transferred to the cloud."

But when reading the full text of the communiqué it's impossible not to wonder whether Steve fully understands the P's and Q's of data protection and the potential risks associated with putting all of the EPO's precious data eggs into the Microsoft basket:

"With the help of contract terms, a data protection agreement and technical implementation, the EPO has ensured the best possible protection for the data stored using Microsoft's cloud services. Microsoft guarantees that the data itself is stored on EU servers within the jurisdiction of the European data protection rules (GDPR).

Under the US Foreign Intelligence and Surveillance Act (FISA) and the US Clarifying Lawful Overseas Use of Data Act (CLOUD Act), Microsoft is obliged to grant security and intelligence agencies access to data stored in its cloud, even when stored on EU servers.

However, the protection level offered by Microsoft is still sufficiently high for DG 1 processes in place for confidential data exchange not to need encryption.

By contrast, to comply with the highest standards, which of course include the requirements imposed under the GDPR, encryption is needed for strictly confidential data.

The guidance on the use of cloud tools therefore states that it is only strictly confidential data that must not be stored in plain form in the cloud, whereas merely confidential information can be stored there without limitations."


Cloud fantasy
Is EPO Vice-President Steve Rowan living in a data protection "cloud-cuckoo land"?



Steve's blind faith in Microsoft and its assurances is very touching but one wonders whether he realises the full ramifications of handing over the EPO's internal e-mail and video-conference communications to a US-based electronic communications services provider.

Quite bizarrely, he doesn't seem to bat an eyelid over the fact that "Microsoft is obliged to grant security and intelligence agencies access to data stored in its cloud, even when stored on EU servers".

Despite the gushing optimism of the EPO Vice-President, there remains a nagging suspicion in some quarters that the EPO's increasing reliance on Microsoft - in particular its cloud computing services - is a legitimate source of public concern.

Before looking into this in more detail we will make a detour into the subject of mass surveillance and "digital sovereignty".

This planned intermezzo is intended to assist the reader in making a fully informed judgment as to whether everything is really as fine and dandy as Steve would have us believe or whether - as some suspect - he is living in a data protection "cloud-cuckoo land"…

Recent Techrights' Posts

RMS is Done at KCL, Next Stop is Oxford
The message of RMS has long resonated well in India
US Government Already Bailing Out OpenAI/Microsoft With "Contracts", As Usual, Back Doors You Cannot Remove Becoming 'a Step Closer' on New PCs (Unless Everyone Acts ASAP)
The next "logical" step towards digital prisons
Towards GNU World Domination
The FSF led by Geoffrey S. Knauth with his friend Richard Stallman in the FSF's Board [...] Let's encourage people to adopt GNU/Linux. There has never been a better time.
GNOME, Microsoft, and GitHub: The Lack of Reporting on Abusive Colleagues Contributed to Profound Media Vacuum (or Blackout), Now Resorting to SLAPPs
This lack of morality/courage has helped enable further abuse, lining up more victims
Microsoft Already Attacks the BSDs as Well (the E.E.E. Way, as Usual)
Bearers of bad news
The Open Source Initiative (OSI) is in Trouble, May Soon be Out of Business
Openwashing needs to end
 
Google News is Amplifying FUD and Lies About Linux (and OpenSSH/SSH) by Promoting Slopfarms With Machine-Generated FUD and Slop Images
Google should know better
Gemini Links 23/04/2025: Librarians, Anubis, and Refactoring a Gemini Capsule
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, April 22, 2025
IRC logs for Tuesday, April 22, 2025
Links 22/04/2025: Ending DEI Policies at Adobe, FTC Sues Uber
Links for the day
Microsoft Devises PR Stunts to Distract From Impending Mass Layoffs and Likely Bad Results Preceding Those Mass Layoffs
A "voluntary exit plan"
Gemini Links 22/04/2025: Deaths, HamsterCMS, and More
Links for the day
Links 22/04/2025: FTC v. Meta Trial and Google Remedies
Links for the day
In Turkey, Windows Down Rapidly While GNU/Linux Grows
Although Turkey is in NATO (but not the EU), it cannot quite trust computer systems controlled by the United States
Richard Stallman Has Updated His Article on Why "Free Software Is Even More Important Now"
Richard Stallman is about to give a talk here in the UK in a few hours
Microsoft's Debt Grew Over 6 Billion Dollars in the Last Reporting Quarter (Before Inauguration), Expect Worse Next Week When 'Results' Are Disclosed and Mass Layoffs Resume
Microsoft is bleeding. It does not want people to notice.
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, April 21, 2025
IRC logs for Monday, April 21, 2025
Richard Stallman Gives Public Talk in London in 7 Hours (Need to Register as Venue Limited to 150 Seats), Public Announcements Begin to Appear
These are not announced weeks or months in advance
Gemini Links 21/04/2025: Remembering Pope Francis, Crystal Simulation
Links for the day
Doing Microsoft's Job. On IBM's Payroll.
today's Red Hat cannot recognise threats even after a head-on collision
Google News is Rewarding Slopfarms, Not Journalism
Don't read junk from chatbots
Teaching GAFAM in Schools is Like Teaching Children to Smoke Tobacco
So suggests an FSF presentation
Richard Stallman, Whose Site is Trusted by Greater Manchester, Has Come to the United Kingdom
He doesn't suck up to the Crown, so he'll never be "knighted"
On Desktops/Laptops in Singapore Does a Fifth of Users Run GNU/Linux?
Probably not, but it's growing fast there
Links 21/04/2025: Fake Ceasefire and Software Patents (Fake Patents) Thrown Out
Links for the day
Companies With Fake Values and a Fake Economic/Financial State (Phony Valuations)
It'll all go up in smoke, eventually
Links 21/04/2025: Microsoft LLM Slop (Plagiarism) Going Out of Control, CT Scans' Cancer Problems Was Underrated
Links for the day
4 Years Ago Freenode Crumbled From Within
there are still hundreds of thousands of users online at any given time
GNOME Has a Long History (Over a Decade) Misusing the Code of Conduct (CoC) to Censor (Cull) Legitimate Technical Criticism
This has nothing to do with manners, it's about control (by cover-up)
Microsoft Has Tainted GNOME, Which Has Key People Acting as a SLAPP Front Against Techrights (Trying to Censor the Site by Extortion and Many Threats)
One common denominator (other than Microsoft salaries) is GNOME, which was led by an actual professional crank until she quit so suddenly months ago
Homeland of Linux Kernel Turning to GNU/Linux?
Adoption of Vista 11 has been relatively low
According to StatCounter, This is What Linux Adoption Looks Like (Based on Web Requests Visible to StatCounter)
How much worse will it get for Microsoft?
Gemini Capsules Still Outsourcing to Certificate Authority Let's Encrypt Now Measured at Less Than 10 (or Less Than 0.3%)
In Geminispace, Let's Encrypt is not commonly used
Twisting Microsoft's Failure (Transmitting Malware) as "SSH Backdoors" and a Linux Problem
Somehow we almost always find that those FUD pieces about "Linux" are based on obvious falsehoods
Vista 11 Has Burned OEMs and Some Move to GNU/Linux
When people can finally avoid Windows (there's no reason to attach it to new PCs) there will be a lot more GNU/Linux users out there
Remember That Microsoft Mass Layoffs Are Imminent Because Its 'Empire' is Falling Apart
European politicians take a long, hard look a Free software
Richard Stallman in the UK This Week, Scheduled to Give Two Public Talks (London and Oxford)
Those talks do not cover the same topics
Gemini Links 21/04/2025: April, Autism, and ASN
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, April 20, 2025
IRC logs for Sunday, April 20, 2025