IBM denies assisting NSA in customer spying

Summary:IBM has categorically denied any involvement with the U.S. National Security Agency's spying spree, and insists it has never handed over client data in the name of surveillance.

Screen Shot 2014-03-17 at 11.22.28

IBM has denied any involvement with the U.S. National Security Agency (NSA)'s surveillance programs, and the company claims it has never handed over any client data to governmental bodies.

In response to allegations concerning the NSA's PRISM program, Big Blue has posted a response in the form of a blog post written by Robert C. Weber, IBM's Senior Vice President of Legal and Regulatory Affairs. Weber writes that IBM has never handed over client data to any third party, and would send the U.S. agency to the client rather than assist the governmental body:

"IBM is fundamentally an enterprise company, meaning our customers are typically other companies and organizations rather than individual consumers. We serve some of the world’s most successful global corporations, helping them achieve their business goals.

IBM has not provided client data to the National Security Agency (NSA) or any other government agency under the program known as PRISM."

Due to documents leaked by ex-NSA contractor Edward Snowden, the enterprise vendor is reportedly being probed by China over security issues, as so many of the country's systems are dominated by IBM, Oracle and EMC. The document leak alleges that the NSA hacked in to Chinese telecommunications firms in order to steal text messages and attack Chinese university servers for spying purposes.

Read this

PRISM: Here's how the NSA wiretapped the Internet

The National Security Agency's "PRISM" program is able to collect, in realtime, intelligence not limited to social networks and email accounts. But the seven tech companies accused of opening 'back doors' to the spy agency could well be proven innocent.

IBM says that while it complies with local laws in the countries in which it operates, the firm has not provided client data to "the NSA or any other government agency under any surveillance program involving the bulk collection of content or metadata," and "has not provided client data stored outside the United States to the U.S. government under a national security order, such as a FISA order or a National Security Letter."

Furthermore, the tech giant says that you won't find any "backdoor" entry within its products, and nothing has been put in place to help government agencies spy on consumers -- and IBM also claims it does not provide source code or encryption keys to governments.

"In general, if a government wants access to data held by IBM on behalf of an enterprise client, we would expect that government to deal directly with that client," the company added. "If the U.S. government were to serve a national security order on IBM to obtain data from an enterprise client and impose a gag order that prohibits IBM from notifying that client, IBM will take appropriate steps to challenge the gag order through judicial action or other means."

The company took the opportunity to make recommendations to surveillance-happy governmental bodies, stating that such entities need to "act to restore trust," and should "not subvert commercial technologies, such as encryption, that are intended to protect business data."

Topics: IBM, Government : US, Privacy, Security

About

Charlie Osborne, a medical anthropologist who studied at the University of Kent, UK, is a journalist, freelance photographer and former teacher. She has spent years travelling and working across Europe and the Middle East as a teacher, and has been involved in the running of businesses ranging from media and events to B2B sales. Charli... Full Bio

zdnet_core.socialButton.googleLabel Contact Disclosure

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.