The Commission proposed 6 concrete non-legislative measures to support law enforcement authorities in overcoming challenges posed by encryption in the context of criminal investigations. These measures respect the safeguarding of strong encryption, required for the functioning of the Digital Single Market and do not in any way prohibit, limit or weaken encryption ("no backdoors").
The Commission is not planning to prepare legislation on encryption in the near future.
The 6 practical measures are:
Progress is underway on all six measures, including a transfer of EUR 5 million to Europol to enhance its existing capability to help law enforcement overcome the challenges posed by encryption in criminal investigations. Furthermore, the Commission is facilitating a structured dialogue to obtain a clearer and more holistic understanding of the issue.
Targeted discussions on possible longer-term strategies take into account the increasing sophistication and wide use of encryption tools in communication, as well as safeguarding user's personal data.
Encryption is regarded as an effective way of ensuring the protection of cybersecurity, data protection and privacy. It can help citizens and businesses to defend themselves against the abuse of IT technologies, such as hacking, identity and personal data theft, fraud and the improper disclosure of confidential information. According to a 2017 study by CSIS, around 18% of global communications traffic is end-to-end encrypted, which is expected to rise to 22% by 2019. Moreover, consumer devices increasingly make use of full disk encryption. However, encryption can also be used by criminals, which may complicate competent law enforcement authorities’ criminal investigations.
As technologies are becoming easier to access and use, even without any technical skills can use encryption to avoid detection. According to the 2018 Europol Internet Organised Crime Threat Assessment (iOCTA), law enforcement authorities increasingly encounter encryption in their criminal investigations. It is one of the major challenges to address, as it denies access to essential intelligence and evidence.