> On Aug 22, 2024, at 2:12 PM, horizon--- via mailop <[email protected]> wrote: > > As a postmaster, I often receive assistance investigation emails from > official organizations in certain countries (which I have not confirmed) such > as intelligence agencies and counter-terrorism organizations, requesting > personal information of a certain user. How should we respond in this > situation?
You need to speak with your organization's legal counsel, but *generally* speaking the requestor must present you with an official order-type of document (the equivalent of a court order or subpoena here in the U.S.) or if, for example, it is a request under the Cloud act, then there are very specific steps that need to be taken for the request to be such that *you* won't be legally liable, because otherwise if you disclose anything that is protected by privacy law you will be in a world of hurt. Most orgs won't produce without an official request from a LE agency or LEO, or a court order or subpoena. In some cases you must also then notify the subject of the request that the request has been received and that you have produced the documents that satisfy the request. Definitely talk with legal counsel. Anne -- Anne P. Mitchell, Esq. Email Law & Policy Attorney Legislative Advisor CEO Institute for Social Internet Public Policy Author: Section 6 of the CAN-SPAM Act of 2003 (the Federal email marketing law) Author: The Email Deliverability Handbook Board of Directors, Denver Internet Exchange Dean Emeritus, Cyberlaw & Cybersecurity, Lincoln Law School Prof. Emeritus, Lincoln Law School Chair Emeritus, Asilomar Microcomputer Workshop Counsel Emeritus, eMail Abuse Prevention System (MAPS) _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
