The Online Safety Bill is just the tip of the UK Surveillance State iceberg

Composite image of digital eye and British flag
(Image credit: Getty Images)

It all starts in 2019. The Online Harms whitepaper marked the first step into the government's mission of making the UK "the safest place to be online," building the premises for the debut of the Online Safety Bill two years later.

Now, after surviving three prime ministers, two government crises, and doubling up its pages on the way, the Bill is in its final stages in Parliament and likely to become law very soon. Yet, internet experts and privacy advocates are still concerned the new provisions will jeopardize citizens' security instead.

To make things worse, UK lawmakers are also pushing for an update to another controversial bill: the 2016 Investigatory Powers Act, also known as the "Snooper Chart" for its wide-ranging surveillance powers. 

That's why many commentators, including digital rights groups, cryptographers, academics, VPN services, and encrypted messaging app providers are now calling for new assurances the two proposals won't be used together for greater control over public communications.

A two-sided issue

"Both of these proposals have seriously negative implications on privacy and fundamental rights. When viewed together, they paint the picture of a UK government willing to compromise its citizens’ rights and its companies’ security in the name of surveillance at all costs," Jurgita Miseviciute, Head of Public Policy & Government Affairs at Proton (security firm behind ProtonVPN and ProtonMail), told TechRadar.

The Online Safety Bill has long been criticized for threatening encryption, ruling vague provisions—around legal but harmful content, for example—and granting intrusive powers to Ofcom, the UK regulator in charge of making sure tech companies enforce new regulations. The latter will have a legal duty, in fact, to protect their users from illegal content and activities. A sort of "private police on online speech," Director of Big Brother Watch Silkie Carlo commented to The Spectator.

Last week's news brought some relief, though, as ministers announced the decision to postpone a contentious provision: Article 122. Side-scanning private and encrypted communications on halt until it is "technically feasible." Yet, despite being a welcome move, "it fell short of providing any legal guarantees, something we still believe is vital and we hope will be rectified in the near future," said Miseviciute.

She isn't alone feeling in this way. Similar worries are shared by Conservative MP David Davis, for example, who described the decision as "just kicking the problem down the road." Conservative Peer and former DCMS minister Lord Kamall also believes that "these powers should not exist" at all. 

At the same time, the Home Office silently launched an eight-week consultation to revise the Investigatory Powers Act. In its current form, the law already enables access to targeted private communications on criminal suspects as well as the storage of internet browsing records for 12 months, among other things.

The government claims an update is needed nonetheless to bring the legislation up to speed with technological advancements that occurred in the seven years since it came into force.

Specifically, lawmakers want encrypted tech firms offering messaging services (like Apple and Meta) to ask for government approval before releasing new security features. These firms will be also required to block or disable security features upon Home Office requests, without telling users about it. 

Apple firmly opposes such a proposal that, once approved, would have immediate effect. The Big Tech company is already said to be ready to pull its iMessage and FaceTime from the UK in the event the revision is enforced.

Miseviciute sees the proposed updates to the Investigatory Powers Act as a further attack to encryption, "as the Home Office could potentially block any security-related feature or update rolled-out by a provider," she said. She believes that this will ultimately make the bill even more problematic. Again, she isn't alone on this.

Matthew Hodgson, CEO at UK-based encrypted messaging software provider Element, said: "The obfuscator mix of two bills designed to meet each other's ends grants the Home Office a totally unacceptable level of oversight over the communications of citizens." 

Jessica Ni Mhainin, Head of Policy and Campaigns at Index on Censorship, also believes that plans for client side-scanning and the link to the Investigatory Powers Act will have "enormously concerning implications," especially for journalism and freedom of expression more widely.

That's why the free speech advocacy group has recently filed a report detailing the unattended consequences of the two laws combined and calling for further amends on Article 122. 

Commenting on this point, CEO of Signal Meredith Whittaker, said: "Parliament must amend Section 122 of the Online Safety Bill in addition to clearly stating that it would not—under any circumstances—submit notices under the Investigatory Powers Act in this manner."  

TOPICS
Chiara Castro
News Editor (Tech Software)

Chiara is a multimedia journalist committed to covering stories to help promote the rights and denounce the abuses of the digital side of life – wherever cybersecurity, markets, and politics tangle up. She writes news, interviews, and analysis on data privacy, online censorship, digital rights, cybercrime, and security software, with a special focus on VPNs, for TechRadar and TechRadar Pro. Got a story, tip-off, or something tech-interesting to say? Reach out to chiara.castro@futurenet.com

Read more
Conceptual image of a large group of cctv camera watching and spying on a mobile phone with messages, it illustrates digital surveillance concept
New EU Chat Control makes scanning encrypted chats optional – but privacy experts are still worried
A hand holding an iPhone with the iCloud logo on screen.
UK's Apple iCloud backdoor "jeopardizes the security and privacy of millions," warn experts
Composite image of digital eye and British flag
Apple could soon be forced to give away all your encrypted data to the UK government
Actalis SSL encryption
Apple is right not to bow down to the UK government's encryption backdoor request - but users should still be angry
ignal messaging application President Meredith Whittaker poses for a photograph before an interview at the Europe's largest tech conference, the Web Summit, in Lisbon on November 4, 2022.
"We will not walk back" – Signal would rather leave the UK and Sweden than remove encryption protections
View on National Assembly building in Paris, France, with French and European flags flying.
France rejects controversial encryption backdoor provision
Latest in Security
Data Breach
Thousands of healthcare records exposed online, including private patient information
China
Juniper patches security flaws which could have let hackers take over your router
Representational image depecting cybersecurity protection
GitLab has patched a host of worrying security issues
Ai tech, businessman show virtual graphic Global Internet connect Chatgpt Chat with AI, Artificial Intelligence.
AI agents can be hijacked to write and send phishing attacks
China
Volt Typhoon threat group had access to American utility networks for the best part of a year
Abstract image of cyber security in action.
MassJacker malware targets those looking for pirated software
Latest in News
A super close up image of the Google Gemini app in the Play Store
It's official: Google Assistant will be retired for phones this year, with Gemini taking over
Quordle on a smartphone held in a hand
Quordle hints and answers for Sunday, March 16 (game #1147)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Sunday, March 16 (game #378)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Sunday, March 16 (game #644)
Three iPhone 16 handsets on show
Apple could launch an iPhone 17 Ultra this year – but we've heard these rumors before
Super Mario Odyssey
ChatGPT is the ultimate gaming tool - here's 4 ways you can use AI to help with your next playthrough