Tech groups seek clarity on UK government’s powers to block messaging app privacy features

The UK’s Investigatory Powers Amendment Bill could grant the government excessive powers to block new privacy features for messaging apps.

 Person, Security

Technology groups are urging government ministers to provide more clarity regarding the extent of proposed powers that could potentially enable the UK government to intervene and obstruct the implementation of new privacy features for messaging applications.

Outlined in the King’s Speech on Tuesday, the Investigatory Powers Amendment Bill raises concerns as it mandates companies to inform the UK’s Home Office in advance about any security or privacy features they intend to add to their platforms, including encryption. Currently, the government possesses the authority to compel telecom companies and messaging platforms to provide data on national security grounds and assist in criminal investigations.

Critics, such as Meredith Whittaker, president of private messaging group Signal, express apprehension about the proposal, fearing it could grant ministers and officials the ability to veto the introduction of new safety features. Whittaker also emphasized the need for more details, stating that the described proposal implies an astonishing level of technically confused government overreach. She warned that it might make it nearly impossible for any service, whether domestic or foreign, to operate with integrity in the UK. Both Meta and Apple, providers of encryption on WhatsApp, iMessage, and FaceTime, have previously cautioned that they would withdraw services from the UK if the government attempts to compromise these features. Meta intends to extend encryption to Facebook Messenger by the end of the year.

In response to the government’s consultation, TechUK, a trade group, raised concerns that the envisaged investigatory powers legislation could force companies to comply with a warrant from the Home Office to hand over user data even during an ongoing review into the appropriateness of the request.

Julian David, CEO of TechUK, criticised the Home Office for insufficient engagement with businesses over the legislation, expressing concerns that the changes could be expansive and disproportionate. He emphasised the need for rectification to ensure that any changes are effective, informed, and focused on addressing capability gaps.

This situation adds to a broader sector backlash against various government policies, including the recently passed online safety bill, which tech groups argue threaten the privacy and integrity of their products. Apple and WhatsApp have previously warned of potential consequences, such as withdrawing critical security features from the UK market or exiting the UK if compelled by the government to break encryption.

In response, the Home Office defended the bill, stating that it aims to deliver urgent and targeted changes to protect the British public from evolving threats. The department emphasised the support for strong encryption where public safety is maintained but stressed that it cannot come at the cost of public safety, and the security of citizens should not be outsourced to unaccountable multinational companies. Meta declined to comment, and Apple did not respond to a request for comment.