On June 5, 2025, Greg Nojeim presented his testimony before the House Judiciary Subcommittee on Crime and Federal Government Surveillance. The hearing was titled "Foreign Influence on American’s Data Through the CLOUD Act." The focus was on the data access agreement between the United States and the United Kingdom under the Clarifying Lawful Overseas Use of Data (CLOUD) Act and potential reforms.
Nojeim raised concerns about the CLOUD Act's failure to adequately protect encryption services. He stated that it allows the UK to demand privacy surveillance from U.S. providers, which could compromise cybersecurity and civil liberties globally. He argued for amendments to prohibit agreements with countries mandating backdoors to encryption and prevent such impositions on any U.S. provider.
A portion of Nojeim’s testimony highlighted that "the first country to receive the benefits of a CLOUD Act agreement — the United Kingdom — has ordered Apple, a U.S. communication service provider, to build in a backdoor to its encrypted cloud backup service." This requirement could compromise privacy and security for all users of this service, including Americans.
During his testimony, Nojeim aimed to explain why Congress enacted the CLOUD Act, describe its broad surveillance scope, indicate omissions regarding encryption protection, and propose how Congress could amend it if necessary actions are not taken by the Department of Justice.
The full testimony is available for reading or viewing via livestream/recording.