Article Details

Scrape Timestamp (UTC): 2023-11-07 16:38:11.074

Source: https://www.theregister.com/2023/11/07/ukgov_wants_prior_notice_of/

Original Article Text

Click to Toggle View

UK may demand tech world tell it about upcoming security features so it can 'disable them'. Campaigners say proposals to reform laws are 'dangerous' and an attack on safety. The UK government has set in train plans to introduce legislation requiring tech companies to let it know when they plan to introduce new security technologies and "force them to disable" when required. The measures were announced just minutes ago in the King's Speech – when the country's monarch reads out a speech that is written by the ruling political party, marking the start of the parliamentary year. They could mean the Home Office get advance access to technical details of security measures employed by popular big tech platforms so it can access user data and monitor nefarious activity. King Charles III said: The legislation will force technology firms to inform the Home Office prior to installing new privacy and security features and enable the government to disable them. It will also increase the government's power to make foreign firms comply. In guidance notes to the legislative programme, the government said the Investigatory Powers (Amendment) Bill would reform the "notices regime," so it could anticipate the risk to public safety posed by the "rolling out of technology by multinational companies that precludes lawful access to data." The government claimed getting forward notice of security technologies would "reduce the risk of the most serious offences such as child sexual exploitation and abuse or terrorism." The Bill is also set to update the conditions for use of Internet Connections Records held by service providers. The government said new measures would "ensure that these can be used effectively to detect the most serious types of criminal activity and national security threats, underpinned by a robust independent oversight regime." Additionally, the government said it wants to increase the resilience of the warrant authorization processes to "ensure the security and intelligence agencies, as well as the National Crime Agency, can always get lawful access to information in a timely way." The Open Rights Group, a digital rights campaign organization, said the proposed laws — which are yet to be debated and voted on in Parliament — could mean that global tech companies are forced to get permission from the UK government if they want to make changes to security features in their products and services, in effect becoming a further attack on end-to-end encryption, which keeps communications and transactions safe. Abigail Burke, platform power programme manager, said: "End-to-end encryption keeps our data and our communications safe and secure. The proposed reforms to the Investigatory Powers Act are the government's latest attack on this technology. "If enacted, these reforms pose a threat to companies' ability to keep our data safe and increase the risk of criminal attacks. We urge the government to engage with civil society and tech companies, and to reconsider these potentially dangerous proposals," she said. The amendments to the controversial Investigatory Powers Act follow the passing of the Online Safety Bill into law. The new rules give the government powers to introduce online child protection laws, one that includes clause 122, the infamous "spy clause," albeit with some caveats, despite the protests from tech companies and privacy campaigners.

Daily Brief Summary

NATION STATE ACTIVITY // UK Government Plans Mandatory Advance Notification of New Security Tech

The UK government seeks to legislate a requirement for tech companies to inform it of new security technologies before they activate them and to disable these features when necessary.

This was announced in the King's Speech and will likely mean that the Home Office could have access to data from major tech platforms for monitoring purposes.

The Investigatory Powers (Amendment) Bill is set to reform the “notices regime” with the aim of better protecting public safety. The government asserts that this advance knowledge of new security measures could help mitigate egregious crimes such as child sexual exploitation, abuse, and terrorism.

The restructuring of the bill includes the modification of conditions for the use of Internet Connections Records kept by service providers. This is meant to enhance detection of serious criminal activity and national security threats.

The proposed legislation may necessitate that tech firms obtain prior approval from the UK government if they are considering updating the privacy features in their offerings, effectively creating a threat to end-to-end encryption. Critics argue this harms communication and transactional safety.

Abigail Burke, from the Open Rights Group, warned these reforms could undermine the ability of companies to secure data and increase the odds of criminal attacks, and urged the government to engage with civil society and tech companies.

The proposed changes followed the passing of the Online Safety Bill into law, which was met with vigorous objections from tech companies due to an infamous "spy clause."