I think you have this completely backwards considering Proton maliciously logged and handed out customer IPs to police [0].
[0]: https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre...
I think you have this completely backwards considering Proton maliciously logged and handed out customer IPs to police [0].
[0]: https://techcrunch.com/2021/09/06/protonmail-logged-ip-addre...
Note also, that the case pertains to Proton Mail, and not Proton VPN. Proton Mail is considered to be a communication service, and in most countries (including Switzerland), communication services are regulated to some extent. The treatment of VPNs is different. There are no Swiss laws compelling us to log IP addresses, personal identifiers, traffic or browsing history, as proven in a 2019 legal case (we were not able to provide the requested information because we don't keep any: https://protonvpn.com/blog/transparency-report/).
I guess it's handled by this finding in the audit:
“VPN servers accept remote logins from administrators, who technically have the ability to tap into production users' VPN traffic”
https://mullvad.net/en/blog/2023/4/20/mullvad-vpn-was-subjec...
In short, they immediately and helpfully complied with police... by letting them know they did not store any data about customers whatsoever.
They literally had no choice, it was a court order.