Microsoft admits it cannot guarantee EU data is protected from U.S. government access (July 2025)
In July 2025, during a French Senate inquiry into digital sovereignty, Microsoft France's Director of Public and Legal Affairs, Anton Carniaux, was asked whether Microsoft could guarantee that French citizens' data would never be handed to U.S. authorities without French government approval. He answered: "No, I cannot guarantee it."
He explained that U.S. companies can be compelled to disclose data under U.S. law, including the CLOUD Act, regardless of where the data is physically stored. The hearing examined concerns about Microsoft's role in hosting sensitive French public-sector and health data. [forbes.com]
Why this story matters:
- It was not a theoretical legal debate.
- It was a sworn public hearing before the French Senate.
- It involved Microsoft acknowledging the practical implications of U.S. jurisdiction.
- It became a significant European sovereignty and cloud governance story. [forbes.com]