Australian data encryption laws explained, enforced
Sydney: Australia has passed controversial laws designed to compel technology companies to grant police and security agencies access to encrypted messages. The government says the laws, a world first, are necessary to help combat terrorism and crime.
However critics have listed wideranging concerns, including that the laws could undermine the overall security and privacy of users. The laws were rushed through parliament on its final day of the year. The Labor Opposition said it had reluctantly supported the laws to help protect Australians during the Christmas period, but on Friday it said that “legitimate concerns” about them remained. Cyber-security experts have warned the laws could now create a “global weak point” for companies such as Facebook and Apple.
Why are encrypted messages an issue?
Australia already has laws which require providers to hand over a suspect’s communication to Police. This may already be possible if a service provider uses a form of encryption that allows them to view a user’s message.
But in recent years, services such as WhatsApp, Signal and others have added an additional layer of security known as end-to-end encryption.
End-to-end encryption allows only the sender and recipient to view a message, preventing it from being unscrambled by the service provider. Australia and other countries have said that terrorists and criminals exploit this technology to avoid surveillance.
How would this change work?
It differs from laws in China, Russia and Turkey, where services offering end-to-end encryption are banned.
Under Australia’s legislation, police can force companies to create a technical function that would give them access to encrypted messages without the user’s knowledge.