A $1.3 trillion spending deal that President Donald Trump signed Friday includes a measure that gives U.S. investigators access to data stored on overseas cloud servers, resolving a long-running legal battle between law enforcement and big tech companies.

But the measure drew widespread criticism from privacy and human-rights activists, who suggested U.S. tech companies—under pressure in Washington—had retreated on the issue. They also suggested the bill could leave data stored in the U.S. vulnerable to demands by authoritarian foreign governments.

The measure, known as the Cloud Act, would create a legal framework for resolving the frequent conflicts that have sprung up recently over the issue.

It would amend U.S. law to make clear that law-enforcement warrants can apply to data that U.S.-based tech companies store anywhere in the world. But the act also would give companies a right to challenge warrants in court based on privacy laws in the specific country where the data are stored.