SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
Story image

Five Eyes nations want legal access to backdoors to fight 'illegal content'

Tue, 13th Oct 2020
FYI, this story is more than a year old

New Zealand, Australia, the United States, Canada, United Kingdom (Five Eyes) plus India and Japan have this week declared their support for end-to-end encryption - but only if they have a way to legally access that information.

Signatories from each country, including New Zealand's Minister of Justice - Minister Responsible for both the GCSB - SIS, Andrew Little,  declare that encryption is an ‘existential anchor of trust in the digital world', and countries shouldn't try to find ways to exploit that security.

Instead, there should essentially be legal backdoors that law enforcement can use to clamp down on illegal content - so long as these backdoors have the appropriate safeguards and oversight.

They argue that encryption can make the enforcement of public safety difficult, particularly when it comes to serious problems like child exploitation.

They cite research from the WePROTECT Global Alliance - a coalition of countries, tech firms and civil society firms - which claims that public social media and communications platforms are the most-used ways of grooming and meeting children online.

The WePROTECT Global Alliance 2019 Global Threat Assessment claims that in 2018, the US National Center of Missing and Exploited Children found that the Facebook Messenger was used in almost 12 million of the 18.4 million reports of child sexual abuse material.

"Measures to increase privacy – including end-to-end encryption – should not come at the expense of children's safety," the signatories state.

As such, they believe the industry should reconsider encryption that blocks any kind of legal access to content.

They believe that technology companies and service providers should also take responsibility for detecting and responding to violations, especially regarding the most serious illegal content like exploitation and abuse, violent crime, and terrorist activities.

Encryption, they argue, undermines these responsibilities and prevents law enforcement from accessing content in cases where it is lawful and necessary.

This is not a new stance - in July 2019, Five Eyes nations strongly recommended that tech companies should provide access to data in a 'readable and usable format' to governments that are acting with appropriate legal authority - all whilst encouraging user safety and taking action against illegal content.

The signatories say that they are committed to developing ‘reasonable' ways of protecting privacy, enabling technological innovation, defending human rights, and defending cybersecurity.

They also say that it is not the case that public safety needs to compromise these valued, adding that it is possible to protect them with the help of the industry.

There are a few key ways that they suggest legal encryption could be implemented:

  • Embed the safety of the public in system designs, thereby enabling companies to act against illegal content and activity effectively with no reduction to safety, and facilitating the investigation and prosecution of offences and safeguarding the vulnerable;
  • Enable law enforcement access to content in a readable and usable format where authorisation is lawfully issued, is necessary and proportionate, and is subject to strong safeguards and oversight; and
  • Engage in consultation with governments and other stakeholders to facilitate legal access in a way that is substantive and genuinely influences design decisions.

“While encryption is vital and privacy and cybersecurity must be protected, that should not come at the expense of wholly precluding law enforcement, and the tech industry itself, from being able to act against the most serious illegal content and activity online.

Signatories include:

  • New Zealand Minister of Justice, Minister Responsible for the GCSB, and Minister Responsible for the NZSIS, Andrew Little
  • Australian Minister for Home Affairs, Peter Dutton
  • Attorney General of the United States, William P. Barr
  • United Kingdom Secretary of State for the Home Department, Priti Patel
  • Canada Minister of Public Safety and Emergency Preparedness, Bill Blair
  • India
  • Japan.
Follow us on: