Encryption, Authority and Control: What the BitLocker Case Reveals About Enterprise Risk
Recent reporting confirmed that Microsoft provided BitLocker recovery keys to law enforcement in response to a valid court order. The case itself follows established legal procedures, yet it highlights a structural reality that many organizations are still evaluating: when encryption keys are stored with a provider, access is technically and legally possible under that provider’s jurisdiction. This is not a question of intent. It is a question of architecture, authority and control.