Was the Dec. 2018 arrest of Huawei&#39;s CFO in Canada legal? Meng Wanzhou, the CFO of the Chinese company Huawei was recently arrested in Canada, and is facing extradition to the US, allegedly on charges of breaking violating U.S. sanctions on Iran. The thing is, Meng isn't a US national, isn't on US soil and neither Canada nor China have approved the renewal of the Iran embargo, this renewal being an unilateral US decision. On what basis can the US have Meng arrested for violating an embargo neither her host country nor her home country agreed to? On an informal note, I'd understand having her or her company's assets frozen, declaring her persona-non-grata, or making it illegal to deal with Huawei, but having Meng jailed (while in a different country, no less) seems like a major overreach to me; it gives the impression that the US can just have whoever they want arrested on foreign soil for not respecting rules they decided on unilaterally. EDIT - More generally, is there any US legal doctrine that non-US-citizens, outside of US sovereign territory, are subject to US criminal or civil law? Are there precedents for arrests of this kind?
The Star Vancouver has a good article outlining the actual charges. Meng is not charged with "violating an embargo" but with defrauding U.S. financial institutions. It may be easier to report that the "crime" is violating sanctions but it's a little more nuanced. Meng is charged with defrauding U.S. financial institutions in order to avoid sanctions. From the article: The U.S. authorities allege Meng committed fraud by telling an HSBC executive her company was in compliance with U.S. sanctions against Iran limiting communication technology. The meeting took place in 2013, but the location was not revealed. HSBC is based in London with operations in the United States. Joanna Chiu, the Star reporter who followed the bail hearing, tweeted: US banks became concerned about the relationship between Huawei and subsidiary SkyCom. Meng told banks the two were separate when in fact "Huawei is SkyCom. This is the alleged fraud". Supposedly, the claims were in a PowerPoint presentation made to a financial institution in 2013. As a result of those claims, banks in the U.S. cleared financial transactions for Huawei. The nexus between Meng, Huawei, SkyCom and U.S. law is Meng making claims to HSBC that Huawei is not related to SkyCom inducing U.S. based financial institutions to unknowingly engage in transactions that violated sanctions with Iran. Thus, the fraud charge against Meng.
The main problem is that there is no court with authority to hear this case outside of China. It may be futile to sue in US courts, since China will not enforce US judgments. You can sue a Chinese company in Chinese court, under their Civil Procedure Law, but this pertains to contract breach. The question is whether there is any law under which the government of China can be sued for negligence – it is unlikely that that is possible (perhaps there is an expert in Chinese law here who can address that issue). This lawsuit is filed in US courts. It is based on the Foreign Sovereign Immunities Act. Supposing that this lawsuit is successful in US courts, then the question is what enforcement actions are possible. Since the defendants are various governments and government agencies in China, execution of the judgment would have to be against those defendants – you can't seize the assets of every person with some connection to China. But given the nature of the Chinese government, it is possible that US courts could find that the assets of Chinese companies are effectively government assets. The short answer is, in fact a lawsuit has been filed, and I expect more. I also don't expect them to succeed in the long run.
You could almost define a country as, "an entity that can defend itself against invasions." Non-sovereign entities are indeed generally prohibited from deploying lethal autonomous defense systems like booby-traps. But governments and state-like actors, as a matter of practice, choose their own rules. laws-of-war and international-law are not like "regular" law: When it comes down to it, states only follow international conventions and treaties to the extent that they consider it to be in their own interest to do so. If you start mining your property, you will probably be forced to stop by local law enforcement. If a warlord starts mining his borders, he's going to get away with it until someone with more power convinces or forces him to stop. Was it "illegal" for Turkey to shoot down a Russian military aircraft? One could cite all sorts of laws and conventions to answer that question. But in practice the consequences of that act are limited to whatever Turkey allows, or to what Russia and its allies can impose on Turkey.
There is nothing illegal with doing this (absent specific contractual terms or industry regulations to the contrary in particular cases, e.g. in the case of export controlled high technology products). This is called operating a wholesale business or operating as a broker. Lots of legitimate legal businesses have this business model.
The Canadian law governing interception of communication (wiretapping and recording) is explained here. Canada is a one-party country, so as long as one party (you, for example) consent, this would not be a violation of that statute. That source also believes (not unreasonably) that is would not constitute the tort of invasion of privacy since under the act The nature and degree of privacy to which a person is entitled … is that which is reasonable in the circumstances, giving due regard to the lawful interests of others (bearing in mind that is it allowed w.r.t. Section 184(1) of the Criminal Code: that is, it is reasonable to do so).
This is tied up in the concept of sovereignty - nation states have control over their territories and citizens and they recognise the right of other nation states to do likewise. The USA, China (Hong Kong) and Panama are all sovereign states, they each decide what the law is within their own territory and they can’t tell each other what to do; they can ask, however, that’s what diplomats do. If a HK domiciled company provides HK based servers then they have to comply with HK law irrespective of where their customers are located. The USA could pass a law requiring US companies (like ISPs) to keep logs of traffic to and from HK servers but they cannot force a HK company to do anything, unless and until it operates in a place where the US has jurisdiction which means both the right and the ability to enforce their law.
It is unlikely that it is a felony to enter a SCIF with a cell phone (or thumb drive, Apple Watch, fitbit etc). The felony clout comes from the non-disclosure agreement which references Sections 793, 794, 798, 952 of Title 18 and Section 783(b) Title of Title 50 -- gathering and disclosing information is a felony. A non-exhaustive reading of the relevant chapters of the US Code does not provide any evidence of a felony charge relatable to phones and SCIFs. There is a federal law against knowingly entering or remaining in any restricted building or grounds without lawful authority to do so. This includes knowingly, and with the intent to impede or disrupt the orderly conduct of Government business or official functions, obstructs or impedes ingress or egress to or from any restricted building or grounds which protects against intrusion of a building or grounds so restricted in conjunction with an event designated as a special event of national significance The courts would almost certainly hold the recent event to be a non-justiciable political matter.
I assume this refers to the case covered here: https://www.theguardian.com/technology/2023/may/22/facebook-fined-mishandling-user-information-ireland-eu-meta The gist is: Under GDPR you can only transfer personal data from inside the European Union to the outside if you have procedures in place that ensures it is still protected to European standards. Facebook was found to have failed in that regards, specifically when it came to access by US spy agencies. It seems indeed quite plausible that it is not possible to transfer personal data from the EU to the US in a way that is compatible with both EU and US law. The EU and the US are in negotiations to find a way to make this legally possible. But until then, it seems that if you do have a European subsidary and want to keep all of your account data in the same place, it needs to be a place with robust privacy protections. That doesn't require it to be in the EU, but something like US, Russia or China would be illegal.