The UK government is once again seeking expanded surveillance powers that would weaken encryption, reigniting a long-standing debate. This is not the first time lawmakers have sought to introduce legislation forcing tech companies to provide access to encrypted communications. Over the years, similar efforts have surfaced in different forms—from the controversial Investigatory Powers Act (IPA) of 2016 to more recent proposals targeting end-to-end encryption used by messaging apps and cloud services.
This debate is not limited to the UK. Other governments have made similar attempts, such as Australia’s Assistance and Access Act, the EU’s discussions around client-side scanning for CSAM detection, and the U.S. EARN IT Act. Each of these initiatives has faced resistance from privacy advocates and the tech industry, raising concerns about the unintended consequences of weakening encryption.
The Investigatory Powers Act and Its Evolution
Originally passed in 2016, the Investigatory Powers Act (often called the “Snooper’s Charter”) granted the UK government broad surveillance capabilities. Among its provisions, it required internet service providers to store browsing history for up to a year and gave intelligence agencies sweeping access to communications data. However, one of the most controversial aspects of the IPA has been its ongoing amendments, particularly those that aim to force companies to weaken encryption by providing government backdoors.
Apple and other tech firms have repeatedly resisted these efforts, arguing that any backdoor for government access could also be exploited by malicious actors. Despite industry pushback, the UK government periodically renews debates about encryption access, framing it as an obstacle to national security efforts rather than a fundamental privacy tool. If these legislative proposals advance, companies will face a tough choice: weaken security for all users or push back through legal and policy channels. Some tech firms have signaled they might reconsider their UK market presence if extreme regulatory measures threaten their encryption standards.
This isn’t just a UK issue–similar scenarios have played out globally. In response to laws requiring weaker encryption, Meta’s WhatsApp threatened to leave the UK, while Signal has made it clear it would rather shut down than compromise security. These cases highlight the broader industry response when governments attempt to undermine encryption.
Why “Only Spying on Bad People” Doesn’t Work
A common argument in favor of weakening encryption is that it will only be used to target criminals and terrorists. However, in practice, once encryption is compromised, it is compromised for everyone. Strong encryption protects not just activists, journalists, and dissidents but also businesses, governments, and ordinary citizens from cybercriminals, identity theft, and mass surveillance.
Encryption is not just a tool for privacy; it is a fundamental check within a democratic system. By ensuring that communication remains secure, encryption prevents any single entity—whether a government or corporation—from achieving absolute control over the flow of information. Legal frameworks rely on checks and balances to prevent overreach, and encryption serves as a technological safeguard that upholds these principles. Without strong encryption, centralized authorities could suppress opposition, stifle dissent, and undermine the mechanisms that allow for accountability and resistance in society.
Real-world examples demonstrate why this matters. Encrypted messaging has been vital for whistleblowers exposing corruption, journalists reporting on sensitive issues, and human rights defenders operating under oppressive regimes. Even businesses rely on encryption to protect trade secrets and prevent espionage. Weakening encryption wouldn’t just impact criminals—it would expose businesses, journalists, and everyday users to unprecedented risk.
Articles
- Washington Post – U.K. orders Apple to let it spy on users’ encrypted accounts
- BBC – UK demands access to Apple users’ encrypted data
- Tech Policy – UK Encryption Crackdown Imperils Privacy, Security & Free Speech
- Amnesty International – UK: Encryption order threatens global privacy rights
- Wikipedia – Encryption ban proposal in the United Kingdom
