The European Commission has unveiled ProtectEU, a new internal security strategy that renews efforts to weaken end-to-end encryption under the guise of strengthening law enforcement capabilities.
According to the source, the strategy is presented as a “vision and workplan” spanning multiple years but lacks concrete policy proposals at this stage. The EU Commission framed the initiative around what it describes as “growing” threats from hostile states, powerful criminal groups, terrorists “operating increasingly online,” and rising cybercrime targeting critical infrastructure.
The ProtectEU strategy focuses on six areas, with one specifically targeting “more effective tools for law enforcement”—the focal point for encryption restrictions. The EU employs euphemistic language when describing potential encryption backdoors, referring to creating roadmaps for “lawful and effective access to data for law enforcement” and seeking “technological solutions for accessing encrypted data.” A technology roadmap on encryption would facilitate development of these “solutions.”
According to the source, the strategy promises that cybersecurity and fundamental rights will be protected as encryption backdoors are implemented. However, critics note this commitment faces inherent contradictions: once a backdoor exists, it becomes available to all actors, including the hostile states and non-state actors the EU claims the strategy aims to protect against.
Beyond encryption, ProtectEU includes several centralization measures. The strategy proposes increased intelligence sharing between member countries and the EU’s Single Intelligence Analysis Capacity (SIAC) to “anticipate” security threats. Additionally, it calls for expanded powers for EUROPOL, the EU’s law enforcement agency, including authority over cross-border and large-scale investigations, positioning it as “a truly operational police agency.”
The source notes that encryption initiatives like this are consistently opposed by technology companies and civil rights and privacy advocates, who warn that backdoors compromise the technical security underpinning private communications and financial transactions alongside the communications themselves.
The strategy stops short of legislative proposals at present but establishes a framework for potential future encryption restrictions across EU member states.
Key facts
- ProtectEU is an internal security strategy announced by the EU Commission spanning multiple years
- The strategy seeks ‘technological solutions for accessing encrypted data’ through euphemistic language around encryption backdoors
- ProtectEU includes proposals to expand EUROPOL’s powers for cross-border investigations
- The strategy proposes increased intelligence sharing between member states via the EU’s Single Intelligence Analysis Capacity (SIAC)
- Tech companies and privacy advocates typically oppose such encryption backdoor initiatives