Encryption is an essential component of a safe and trustworthy Internet. Weakening it not only undermines personal privacy but also jeopardizes national security and global cybersecurity standards.
The UK government challenged Apple’s long-standing commitment to privacy earlier this year by using a secret Technical Capacity Notice under the amended 2016 Investigatory Powers Act to demand that Apple modify its iCloud service to grant law enforcement access to encrypted user data. The secret nature of this order is particularly concerning. Policy changes, decisions, or bills that threaten encryption are usually public, which provides an opportunity for the technical community, civil society, and the general public to voice their concerns. In addition, while the secret order to Apple was made public, it is unknown whether other businesses may have received orders in a similar manner. Because of the interconnected nature of the Internet, encryption issues are truly global. This mandate, if enforced, would create a dangerous precedent and force Apple to create vulnerabilities that affect users far beyond UK borders. Unauthorized surveillance of users’ data could occur worldwide.
Contents
Encryption and the Risks of Backdoors
When it comes to protecting our personal data, encryption is an essential and indispensable tool. While governments cite national security and crime prevention as justifications for backdoors—ways to access encrypted data—they inherently weaken the integrity of encryption, increasing the risk of malicious third parties accessing sensitive information.
To safeguard everyday communications, financial transactions, and even information pertaining to national security, we require robust encryption. Strong encryption is used by vulnerable groups, such as journalists, activists, and marginalized communities, to protect their identities and private communications from harassment and oppression. Introducing backdoors into encryption systems creates inherent security flaws. Once a vulnerability exists, it’s not only available to law enforcement, but it could also be exploited by cybercriminals and hostile state actors. Ironically, while claiming to increase safety, governments that allow backdoors actually put their citizens at risk.
Beyond the technical risks, encryption backdoors have human rights implications as well.
Weakening encryption erodes trust, stifles freedom of expression, and could lead to mass surveillance, impacting not just UK citizens but users globally.
Global Implications
Backdoor mandates contribute to Internet fragmentation. Following the UK government’s order, Apple has already withdrawn its encrypted backup services from the UK. This means that UK Apple users do not have the same options for data security, and their experience is different from that of other users worldwide; they are already less safe.
There is a lot of pressure on governments and law enforcement to find a solution to the problem of children’s online safety. The order from the UK could lead to similar legislation in other countries, limiting encryption, putting children in danger, and jeopardizing the privacy of even more people. What children deserve is legislation that tackles the issue effectively and proportionally, without inhibiting security, rights, and privacy for all.
Enforcing backdoor mandates could also drive international tech companies to exit markets like the UK. To maximize profit and efficiency, tech corporations want to offer consistent methods and services. When a government requests a backdoor, they might exit the market instead of reworking their systems, further fragmenting the global digital ecosystem and impeding technological innovation.
Alternatively, and more dangerously, if many governments request backdoors, tech companies might normalize them in their services and make them available in as many markets as possible.
What Can You Do?
It is essential for tech companies, policymakers, and civil society to work together. These spheres become stronger and better positioned to resist measures that threaten online privacy and security when they stand together. You can join advocacy efforts, connect with like-minded individuals, and mobilize. The Global Encryption Coalition promotes and defends encryption where it is under threat. Join the coalition today.
Your voice is powerful; use it to stand up for encryption. Join our letter-writing campaign if you live in the UK and tell your elected officials that you oppose orders requiring technology companies to weaken encryption.
