Calls on surveillance partnership of intelligence agencies to respect strong encryption

Liberty Victoria is one of 83 organisations and experts from 5 nations demanding “Five Eyes” respect strong encryption.

On Friday 30 June 2017, 83 organisations and individuals from Australia, Canada, New Zealand, the United Kingdom, and the United States sent letters to their respective governments insisting that government officials defend strong encryption. The letter comes on the heels of a meeting of the “Five Eyes” ministerial meeting in Ottawa, Canada last week.

The “Five Eyes” is a surveillance partnership of intelligence agencies consisting of Australia, Canada, New Zealand, the United Kingdom, and the United States. According to a joint communique issued after the meeting encryption and access to data was discussed. The communique stated that “encryption can severely undermine public safety efforts by impeding lawful access to the content of communications during investigations into serious crimes, including terrorism.”

In the letter organised by Access Now, CIPPIC, and researchers from Citizen Lab, 83 groups and individuals from the so-called “Five Eyes” countries wrote “we call on you to respect the right to use and develop strong encryption.” Signatories also urged the members of the ministerial meeting to commit to allowing public participation in any future discussions.

Read the full letter here.

A number of quotes: 

“Massive surveillance operations conducted by the Five Eyes partnership inherently put the human rights of people around the world at risk. The joint communique commits to human rights and the rule of law, but provides no detail as to how these powerful, secretive spy agencies plan to live up to those commitments. We call for public participation and meaningful accountability now, otherwise this will remain nothing more than a meaningless commitment.” - Amie Stepanovich, U.S. Policy Manager at Access Now

"Attempting to undermine the free use and development of strong encryption technology is not only technologically misguided, it is politically irresponsible. Both law enforcement and intelligence agencies have access to more data—and more powerful analytical tools—than ever before in human history. Measures that undermine the efficacy or public availability of encryption will never be proportionate when weighed against their profound threat to global human rights: encryption is essential to the preservation of freedom of opinion, expression, dissent, and democratic engagement. Without it, meaningful privacy, trust, and safety in the digital sphere would not be possible." — Lex Gill, Research Fellow at the Citizen Lab, Munk School of Global Affairs

"Encryption is used by governments, businesses, and citizens alike to secure communications, safeguard personal information, and conduct business online. Deliberately weakening encryption threatens the integrity of governance, the safety of online commerce, and the interpersonal relationships that compose our daily lives. We must not sacrifice our core values to the threat of terrorism: the solution to such threats must entail better protecting our basic rights and the technologies that advance them." — Christopher Parsons, Research Associate and Managing Director of the Telecom Transparency Project at the Citizen Lab, Munk School of Global Affairs

“Encryption protects billions of ordinary people worldwide from criminals and authoritarian regimes. Agencies charged with protecting national security shouldn’t be trying to undermine a cornerstone of security in the digital age.” - Cynthia Wong, senior internet researcher at Human Rights Watch

"Our political leaders are putting people around the world at greater risk of crime when they call for greater powers to weaken our digital security. Security experts and cryptographers are as united in their views on encryption as scientists are on climate change. Politicians need to listen to them before they make decisions that could put us all at risk." - Jim Killock, ORG

“All sensitive personal data must be encrypted as a matter of human rights to privacy, especially health data, ie, all information about our minds and bodies, wherever it exists. Today health data is the most valuable personal data of all, the most attractive to hackers, and the most sold and traded by the massive, hidden global health data broker industry.” - Dr. Deborah Peel, Patient Privacy Rights

“Calls to undermine encryption in the name of ‘national security’ are fundamentally misguided and dangerous. Encryption is a necessary and critical tool enabling individual privacy, a free media, online commerce and the operations of organisations of all types, including of course government agencies. Undermining encryption therefore represents a serious threat to national security in its own right, as well as threatening basic human rights and the enormous economic and social benefits that the digital revolution has brought for people across the globe.” - Jon Lawrence, EFA

"Assurances of strong encryption not only benefit civil liberties and privacy, but the economy as well. A vibrant and dynamic Internet economy is only possible if consumers and users trust the environment in which they're conducting business. While law enforcement and intelligence services have legitimate concerns over their ability to access data, those concerns need to be balanced with the benefits encryption provides to average users transacting in cyberspace. A strong Internet economy, buttressed by the trust that encryption produces, is vital to national interests around the globe. National policies should support and defend, not weaken and abridge, access to encryption." - Ryan Hagemann, Niskanen Center

"The strength of the tools and techniques that our government and members of the public have and use to secure our nation and protect our privacy is of significant public interest. Transparency and accountability around a nation's policy regarding the use of encryption is a bedrock importance in a democracy, particularly given the potential of backdoors to put billions of online users at greater risk for intrusion, compromise of personal data and breaches of massive consumer or electoral databases. The democracies in the ‘5 eyes’ should be open and accountable to their publics about not only the existence of these discussions but their content, removing any gap between what is being proposed and the consent of those governed by those policies." - Alex Howard, Sunlight Foundation

"Encryption is a vital tool for journalists, activists, and everyone whose lives and work depend on using the internet securely. It allows reporters to protect their confidential sources from reprisal, and to fearlessly pursue stories that powerful actors don't want told. It offers protection from mortal danger for dissidents trying the communicate under repressive regimes. Undermining the integrity of encryption puts lives at risk, and runs directly counter to the mandate of the Five Eyes Signals Intelligence agencies to keep their citizens safe." - Tom Henheffer, ED, Canadian Journalists for Free Expression

"The answer to concerns on 'going dark' is to help bring our law enforcement and counterterrorism officials into the future, not send encryption to the past. We hope to hear back from the Five Eyes that they were looking for how to adapt to digital security measures, not break them to the detriment of everyday Americans and our national security. As Five Eyes leaders work on a strategy to protect against cyberattacks, it is important to have a transparent process and cooperation between governments and civil society without stifling innovation or weakening other parts of security." - TechFreedom Executive Director Austin Carson

“Strong encryption is essential for modern society. Broken technologies undermine commerce, security, and human rights.” - Jeramie Scott, EPIC

“Any attempt by the UK Government to attack encrypted messengers would be nothing less than an attack on the right to a private conversation. Far from making the internet safer, by undermining the technology that protects everything from our bank accounts to our private conversations, governments around the world are putting us all at risk. Transparency is vital around any coordinated plans that could jeopardise both our security and our rights.” - Silkie Carlo, Policy Officer at Liberty

"We increasingly rely on a secure internet for work, personal relationships, commerce, and politics. While we support justifiable lawful intercept with appropriate oversight, we don't think we should be seriously weakening the security of the internet to achieve it. Attempts to weaken encryption will do more damage to our society and our freedom than the possible threats it's meant to be protecting us from. " Thomas Beagle, Chairperson, NZ Council for Civil Liberties

 

UPDATE: 24 October 2017

Officials from three of the five countries - Canada, New Zealand and the UK - have now responded to this letter. This is a post published on 19 October 2017 with those responses.

Two remaining countries - Australia and the United States - have yet to respond.

This may be a good opportunity to put pressure on officials to at least respond to the letter as well - and also for officials to commit to meeting with civil society groups and technologists (as well as other experts) on this issue, specifically as it continues to be in the news.