WhatsApp and several other messaging platforms are joining forces to challenge the UK’s plan to compel technology firms to undermine end-to-end encryption in private messaging, a central feature of its proposed internet safety legislation.
In an open letter, WhatsApp, along with Signal and five other messaging applications, expressed concerns that the law could empower “unelected officials” to diminish the privacy protections for billions of users globally.
The Online Safety Bill, initially aimed at implementing stringent regulations on platforms like Facebook, Instagram, TikTok, and YouTube, has undergone revisions. In November, the original provisions aimed at combating “legal but harmful content” were removed to safeguard free speech, with the legislation shifting its focus primarily to illegal content, especially that concerning child safety.
The British government asserts that the bill does not constitute a ban on end-to-end encryption nor does it mandate that services weaken their encryption protocols.
However, the bill seeks to empower the regulator Ofcom to require platforms to utilize accredited technologies or innovate solutions for identifying child sexual exploitation material.
According to the letter’s signatories, these measures contradict the principles of end-to-end encryption, which is designed to ensure that only the sender and the intended recipient can access the content of messages.
“The bill offers no explicit guarantees for encryption, and if enacted in its current form, may allow Ofcom to compel the proactive scanning of private messages on services utilizing end-to-end encryption – effectively nullifying its purpose and compromising user privacy,” they stated.
The signatories labeled the legislation an “unprecedented threat to the privacy, safety, and security of every UK citizen,” cautioning that it could encourage hostile governments to implement similar laws.
A government spokesperson responded by emphasizing the importance of strong encryption but maintained that it should not compromise public safety. They remarked, “Tech companies have a moral obligation to ensure they are not preventing law enforcement from addressing the alarming levels of child sexual abuse occurring on their platforms.”
© Thomson Reuters 2023
