Caayn
Member
Engadget
Telegraph
Tom's Hardware
Draft of the EU report
Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive
The European Union might want it to be easier for police to obtain data, but that doesn't mean it'll be easy for officers to read that data. The European Parliament has proposed amended regulation that would not only require end-to-end encryption when available, but forbid backdoors that offer guaranteed access to law enforcement. EU residents need to know that the "confidentiality and safety" of their data is "guaranteed," according to the draft, and backdoors risk "weakening" that privacy.
If they do clear, though, they could set up a conflict between the EU and countries that aren't so fond of encryption. The UK is undoubtedly the main concern, even after it leaves the EU. A ban on backdoors would make it difficult for the country to enforce the Investigatory Powers Act's requirement that companies remove "electronic protection" when possible. How would that be meaningful when virtually every tech company in Europe is encrypting data traffic? You're not likely to see UK-specific versions of apps that introduce security holes.
This would also thwart the efforts of some American politicians (such as Senators Richard Burr and Dianne Feinstein) to effectively ban airtight encryption.
Telegraph
The proposals, from MEPs on the European Parliament's Civil Liberties, Justice and Home Affairs Committee, have been tabled as amendments to draft EU privacy legislation.
Buried in the amendments, the documents state: ”When encryption of electronic communications data is used, decryption, reverse engineering or monitoring of such communications shall be prohibited.
"Member states shall not impose any obligations on electronic communications service providers that would result in the weakening of the security and encryption of their networks and services."
The proposals will first have to be approved by MEPs and scrutinised by the EU Council. Kristina Holt, a senior associate at law firm Pinsent Masons, said the Government may be able to achieve some exemptions on national security grounds, which the EU does not have power over.
Tom's Hardware
We've lately seen some EU member states push for increased surveillance and even backdoors in encrypted communications, so there seems to be some conflict here between what the European Parliament institutional bodies may want and what some member states do.
However, if this proposal for the new Regulation on Privacy and Electronic Communications passes, it should significantly increase the privacy of E.U. citizens' communications, and it won't be so easy to roll back the changes to add backdoors in the future.
Draft of the EU report
Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL concerning the respect for private life and the protection of personal data in electronic communications and repealing Directive