UK Legislators Are Using Encrypted Messaging Services To Possibly Dodge Records Requests

from the never-attribute-to-stupidity-what-can-be-chalked-up-to-malice dept

Sure, we all love secure communications. And government officials shouldn't be afraid of using encrypted communication options. But they need to remember their obligations to the public. Security can often be converted to obscurity. And yet, government officials migrate towards encrypted messaging options, but not for security reasons. Instead, they choose the same options they decry in public. Encryption is for criminals they claim, even as they avail themselves of the "criminal" option to "protect" themselves from the public they serve.

Lawmakers continue to demand "lawful access" to encrypted/fleeting communications. And they do this while utilizing the same services. Whatever it takes to keep the general public from viewing the sausage-making process. It's not just a US thing. Our counterparts in the UK are just as hypocritical, as the BBC reports.

Ministers could be banned from using self-destructing messages on Whatsapp or Signal for official business if a legal challenge is successful.

Transparency campaigners have sent a letter to the government, arguing that politicians and staff could avoid accountability by using these features.

Members of both the Cabinet and Shadow Cabinet use Whatsapp and Signal.

Whatsapp and Signal both utilize end-to-end encryption. More relevant to this discussion is both apps allow for automatic deletion of messages. The UK government needs to say more than this when it's utilizing apps with built-in self-destruct options.

The Cabinet Office said records of official communications are "retained in line with guidance".

We're apparently just supposed to believe the government is retaining messages delivered via services that have baked in options for periodic, automatic deletion of communications.

This isn't to say government officials shouldn't avail themselves of encrypted communication options. They definitely should. Encryption is a valuable frontline defense against malicious hackers. But policies should be written to specifically address this in order to ensure the most important stakeholders in governance -- the members of the public paying their salaries -- can still access official communications.

If the government can't sort this out itself, maybe the courts will have to. There's a lawsuit threat dangling over the UK government if it can't provide an adequate response to public interest groups that suspect lawmakers' moves to encrypted services aren't so much about security as they are about opacity. Campaign law group Foxglove has already filed a lawsuit demanding to know whether the government is utilizing this for security reasons or for the other reason, which would be to separate the public from information the public should have.

As was stated earlier: encryption is great. It secures communications. What it shouldn't do is provide a handy excuse for government employees to ditch their obligations to the public. By all means, keep malicious actors out. But let the public in.

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: encryption, records requests, transparency, uk