Microsoft has announced new human rights and security measures after completing an internal inquiry into how the Israeli military used its cloud technology for the surveillance of Palestinians. The company said it will strengthen oversight of projects linked to national security agencies and review how employees handle security clearances issued by foreign governments.
Background of the Investigation
The move follows concerns raised during an investigation into the use of Microsoft's Azure cloud platform by Israel's Unit 8200 intelligence agency. Reports indicated that the Israeli military used Microsoft's cloud technology to store and analyse large amounts of intercepted Palestinian phone calls. Microsoft launched an internal attorney-directed review and engaged an external law firm, Covington & Burling LLP, to conduct additional fact-finding.
Key Findings
Covington's investigation found evidence supporting elements of The Guardian's reporting, including information relating to IMOD consumption of Azure storage in the Netherlands and use of AI services. As a result, Microsoft informed IMOD of its decision to cease and disable specified subscriptions and services, including cloud storage and AI technologies.
New Measures Announced
Microsoft is implementing five key follow-up steps:
- Enhanced pre-contract review processes for national security-related engagements, improving human rights due diligence efficiency.
- Review of security clearance oversight in relevant non-U.S. markets to ensure clear guidance and communications.
- Periodic reviews of acceptable use policies in light of evolving scope of work or intervening events, with strengthened continuous due diligence in conflict-affected areas.
- Additional employee guidance on policies related to acceptable use of products and services, including escalation pathways.
- New reporting mechanisms through the Microsoft Integrity Portal's Trusted Technology Review section, allowing anonymous reporting of concerns.
Human Rights Commitments
Microsoft reaffirmed its commitment to the UN Guiding Principles on Business and Human Rights and other international standards. The company conducts regular human rights impact assessments, integrates human rights into business processes, engages external stakeholders, and publishes annual transparency reports.
Conclusion
Microsoft stated it will continue to seek input from human rights experts and stakeholders, incorporate lessons learned, and refine its approach to respecting human rights. The company plans to share updates on these efforts in its annual Human Rights Transparency Report.
