Snowden and Privacy Experts Criticize Revisions to the Snoopers’ Charter

(Image Credit: woraput)

Alleged revisions to the Investigatory Powers Bill, first circulated in 2012 and labelled the “Snooper’s Charter” by critics, have been criticised ahead of the bill’s presentation to Parliament on Wednesday. Home Secretary Theresa May says “contentious” sections have been removed from this draft, but whistleblower Edward Snowden and privacy advocates remain unconvinced.

The UK government argues it needs expanded powers to respond to threats that exploit encrypted online communication, from terrorism to organised crime — examples cited include the use of BlackBerry Messenger during the 2011 London riots.

A judge should be in charge of allowing warrants, not a politician.

On BBC One’s Andrew Marr show, Mrs May noted: “As people move into the digital age they no longer always communicate on telephone, they communicate over the internet.” While it is true that many threats have moved online and that intercepting phone calls alone is no longer sufficient, an outright ban on robust encryption would be short-sighted and could undermine legitimate security needs.

Prime Minister David Cameron posed the provocative question earlier this year: “In our country, do we want to allow a means of communication between people which we cannot read?” Most people in a liberal democracy would answer yes, valuing private communication channels.

Security specialists argue that weakening or banning encryption is neither practical nor desirable. Strong encryption protects corporate secrets, secures online commerce, and safeguards personal data. Earlier versions of the bill reportedly required companies offering encrypted services to retain full records of traffic content and to provide a backdoor for authorities to intercept communications.

Police sources now suggest the revised bill will require firms to retain metadata — records of who communicated with whom and when — rather than the full content of messages. However, as Edward Snowden has emphasised, metadata such as IP addresses and timestamps can still reveal highly sensitive information about individuals’ behaviour and associations.

Journos: if officials say they aren’t capturing your web history, push back. “Metadata” reveals every site you hit. pic.twitter.com/IpW6b56kxl

— Edward Snowden (@Snowden) November 2, 2015

Reports also indicate the proposal still seeks to restrict end-to-end encryption that prevents government access. Under the draft, providers would be permitted to use encryption only if they implement a means for authorities to gain access when requested. Introducing deliberate weaknesses or backdoors undermines the very purpose of encryption and creates vulnerabilities that can be abused by malicious actors.

Journos: UK officials don’t want to “ban encryption” — they want to ban encryption that *works*. Deceptive intent. pic.twitter.com/wTgLeFYJqi

— Edward Snowden (@Snowden) November 2, 2015

Shadow Home Secretary Andy Burnham has acknowledged a broad consensus that updated legislation is necessary and cautioned against an “over-hysterical” response that could leave the UK with outdated tools. He and Sir Keir Starmer — former Director of Public Prosecutions and Labour’s shadow minister — have argued that judicial oversight should govern warrant authorisation rather than political decision-making.

Privacy campaigners remain sceptical that the bill will be sufficiently reformed. Some view the Home Office’s approach as a negotiating tactic: propose sweeping powers initially so that later compromises appear more moderate and are easier to enact. The proposed legislation is due to be published tomorrow; observers are preparing to scrutinise the text and its likely impact on privacy and security.

Are you concerned about the government’s approach to encryption? Share your views in the comments.

This article aims to balance the stated national security rationale for new investigatory powers with the privacy and security risks that arise from weakening encryption or expanding mass data retention. Any legal framework that affects communications security should include clear judicial oversight, robust safeguards, and transparency measures to protect civil liberties while enabling legitimate law enforcement work.