In Germany, some digital services may need to use end-to-end encryption, if a new proposed law is passed.
Wherever it is technically feasible, the bill will mandate that cloud service providers, email providers, and messaging platforms give users the option to encrypt their data.
Germany may become the first nation to protect the right to private and secure communications in federal law, at a time when governments around the world are progressively attempting to crack encryption in the name of public safety.
Encryption As A Legal Standard
“Although end-to-end encryption is now the industry standard, individual messenger services do not use end-to-end encryption or only use it for certain functions, without this being justified by technical restrictions,” reads the bill, Techradar reported.
Encryption is the process of scrubbing data into an unintelligible format to prevent unauthorised access. This implies that messages sent by users to one another are hidden from view, even by the provider.
Although E2E is now available in many apps (consider the top secure email services available or messaging apps like Signal), it is not required.
In an attempt to change this, the law will make encryption the new norm and the default for any services that can technically handle handling people’s most sensitive data.
A portion of the German Telecommunications Telemedia Data Protection Act (TTDSG) is to be amended by the draft bill. It will necessitate teaching users how to use the protection for maximum security in addition to imposing an obligation on interpersonal communication and potentially requiring service providers to offer encryption—or, if applicable, explain why it couldn’t be implemented.
Legislators believe that by upholding the right to encryption under federal law, they will be able to encourage public bodies, corporations, and individuals to embrace the widespread adoption of these safe technologies.