On December 15, 2021, the United States and Australia signed an agreement on cross-border law enforcement demands for data from service providers (“Agreement”).  The Agreement is the second bilateral agreement to be entered into under the Clarifying Lawful Overseas Use of Data (CLOUD) Act, following the U.S.-UK agreement in 2019.

The Agreement also follows the passage of the Telecommunications Legislation Amendment (International Production Orders) Bill 2020 by the Australian government, which established a framework for its enforcement agencies to access certain electronic data for law enforcement and national security purposes held by companies outside of Australia.  Specifically, that legislation created international production orders, a form of legal process that Australian enforcement authorities can use to compel the interception of real-time communications or the production of stored communications by communications providers in foreign countries with which Australia has an agreement.  In an Explanatory Memorandum, the Australian government explained that “[t]he Bill provides the legislative framework for Australia to give effect to future bilateral and multilateral agreements for cross-border access to electronic information and communication data.”

While a copy of the Agreement has not yet been made public, the CLOUD Act generally requires that foreign governments remove barriers in their domestic laws that would prevent U.S. law enforcement and national security agencies from obtaining electronic data directly from providers located in their jurisdiction.  See, e.g., 18 U.S.C. § 2523(b)(4)(I).  The CLOUD Act also permits U.S. companies to disclose user data in response to orders from foreign governments that have entered into an agreement under the Act.   See, e.g., Id. § 2511(2)(j).  Moreover, the CLOUD Act mandates that the U.S. Attorney General certify to Congress that the partner country has “robust substantive and procedural protections for privacy and civil liberties.”  Id. § 2523(b).

The Agreement will go into effect following congressional and parliamentary review in both the United States and Australia.  In the U.S., the Agreement will take effect unless Congress disapproves by joint resolution.

Print:
Email this postTweet this postLike this postShare this post on LinkedIn
Photo of Jim Garland Jim Garland

Jim Garland’s practice focuses on government investigations and enforcement matters, litigation, and cybersecurity. Recognized by Chambers USA as a leading practitioner in both the white collar and cybersecurity categories, Jim draws upon his experience as a former senior Justice Department official to advise…

Jim Garland’s practice focuses on government investigations and enforcement matters, litigation, and cybersecurity. Recognized by Chambers USA as a leading practitioner in both the white collar and cybersecurity categories, Jim draws upon his experience as a former senior Justice Department official to advise clients on sensitive, multidimensional disputes and investigations, often with national security implications. He previously served as co-chair of Covington’s “Band 1”-ranked White Collar and Investigations Practice Group and currently is a member of the firm’s Management and Executive Committees.

Jim regularly represents corporate and individual clients in government investigations and enforcement actions. He has successfully handled matters involving allegations of economic espionage, theft of trade secrets, terrorism-financing, sanctions and export control violations, money laundering, foreign bribery, public corruption, fraud, and obstruction of justice. He has particular expertise advising clients in connection with investigations and disputes involving electronic surveillance and law enforcement access to digital evidence.

Jim has substantial experience litigating high-stakes, multidimensional disputes for clients across a range of industries, including companies in the high-tech, financial services, defense, transportation, media and entertainment, and life sciences sectors. Many of his civil representations have substantial cross-border dimensions or involve parallel government enforcement proceedings in multiple forums.

In conjunction with his investigations and litigation practice, Jim regularly assists clients with cybersecurity preparedness and incident-response matters. He helps clients in assessing security controls and in developing policies and procedures for the protection of sensitive corporate data. He also regularly assists companies in responding to significant cybersecurity incidents, including in connection with criminal and state-sponsored attacks targeting customer and employee data, financial information, and trade secrets.

From 2009 to 2010, Jim served as Deputy Chief of Staff and Counselor to Attorney General Eric Holder at the U.S. Department of Justice. In that role, he advised the Attorney General on a range of enforcement issues, with an emphasis on criminal, cybersecurity, and surveillance matters.