TLDR:
1. Protonmail received Swiss legal request that was based on proven legal grounds and thus had to comply with.
2. They started monitoring the user's account and informed them that their data was requested. (Informing is required by Swiss law)
3. Only data Protonmail keeps by default is account creation date. Now they also logged the IP of the tracked account.
4. This IP information was given to the Swiss authorities.
5. The Swiss authorities gave this information to Interpol.
What should Protonmail have done differently here?
TLDR:
1. Protonmail received Swiss legal request that was based on proven legal grounds and thus had to comply with.
2. They started monitoring the user's account and informed them that their data was requested. (Informing is required by Swiss law)
3. Only data Protonmail keeps by default is account creation date. Now they also logged the IP of the tracked account.
4. This IP information was given to the Swiss authorities.
5. The Swiss authorities gave this information to Interpol.
What should Protonmail have done differently here?