cross-posted from : https://lemmy.zip/post/60387297
Proton Mail provided Swiss authorities with payment data for defendtheatlantaforest@protonmail.com — the account linked to Stop Cop City protests in Atlanta. The FBI obtained this information through a Mutual Legal Assistance Treaty request on January 25, 2024, identifying the activist behind the anonymous account through their credit card identifier.
My question is what’s the legal requirements for payments? How long do they have to keep transaction records and do they have to connect this to accounts? This should be available in the ToS(but cannot find this). Compare with Mullvad (https://mullvad.net/en/help/no-logging-data-policy) (Edit: spelling)
I’m pretty sure proton offers a crypto payment of some form. Which would mean if this person had used that instead of a credit card, theoretically there wouldn’t be anything to subpoena.
Either way, email isn’t exactly safe.
If I remember correctly, payment data is required to be logged for 10 years.
Edit: This varies from jurisdiction to jurisdiction, but it’s normally 5-10 years.