European Commission Revives Push for Encryption Backdoors in ProtectEU Strategy

The EU’s ProtectEU strategy is reinstating efforts to undermine end-to-end encryption, ostensibly for the sake of enhancing law enforcement capabilities. This new strategy, unveiled by the EU Commission, is framed as a long-term vision and workplan, though it does not offer any concrete policy proposals. A press release accompanying the announcement highlights major security threats such as hostile states, criminal groups, terrorists, and cybercrime, all of which are increasingly operating online.

The EU strategy prioritizes six areas, one of which is "enhancing tools for law enforcement," where online encryption is targeted. The EU employs euphemisms to describe the potential implementation of encryption backdoors, such as developing "roadmaps for lawful and effective access to data for law enforcement" and seeking "technological solutions for accessing encrypted data."

This technology roadmap would enable the discovery of these "solutions." The EU is not the only entity pursuing measures to legislate against encryption, but such initiatives are consistently met with warnings from tech companies and civil rights advocates. The primary concern is that encryption safeguards both private communications and the technical security of these communications, financial transactions, etc. The new EU strategy assures that cybersecurity and fundamental rights will be protected as a future encryption backdoor is put in place.

However, this assurance is dubious, as a backdoor effectively becomes accessible to all actors, including hostile states and non-state actors. Other major aspects of the ProtectEU strategy include enhanced intelligence sharing among member countries, expanding the Single Intelligence Analysis Capacity (SIAC), and granting the EU’s law enforcement agency EUROPOL more powers, including cross-border and large-scale investigations. The ultimate goal is to "strengthen support" for member countries.