Online Safety Bill updates will “weaken security” — WhatsApp chief

With legislation for the UK Online Safety Bill in progress, head of WhatsApp Will Cathcart has questioned its current notion of undermining encryption, to scan for harmful content

Speaking on the parliamentary developments around the bill, Cathcart told the Financial Times that calling on tech companies to breach their encryption measures, to monitor online harms, would threaten security of government communications and empower authoritarianism.

Cathcart went on to argue that alternative methods to protect children using WhatsApp are available without needing to undermine its encryption, while tech corporations generally claim safely scanning content using encrypted apps is impossible.

“If the UK decides that it is OK for a government to get rid of encryption, there are governments all around the world that will do exactly the same thing, where liberal democracy is not as strong, where there are different concerns that really implicate deep-seated human rights,” said Cathcart.

WhatsApp’s existing security measures include a flagging tool for abusive messages, and monitoring of user behaviour patterns for possible risk.

>See also: Data encryption: what can enterprises learn from consumer tech?

The WhatsApp head went on to comment that it is “puzzling that the pressure we’re getting from governments is to weaken security, not to increase it”, with public sector operations being increasingly digitalised.

He continued: “Governments around the world should be pushing tech companies as hard as possible to up the security of their communications, especially liberal democracies.

“We’re in an era on the internet where cyber attacks are going way up, especially from hostile nation states. And so the idea that now is a moment to weaken security, I just think it’s very, very wrong.”

The Home Office has previously urged tech stakeholders with end-to-end encryption present in their systems to provide “lawful access” to communications, with ex-home secretary Priti Patel stating that encryption “intentionally blinds companies to abhorrent child sex abuse”, with a “disastrous impact on child safety”.

The pending legislation is the subject of debate on whether big tech should be forced to scan and eliminate harmful content.

>See also: Q&A: the importance of online content moderation for a diverse user base

What the Online Safety Bill will mean for businesses

The Online Safety Bill, which is planned for a return to legislation plans “quickly” according to culture secretary Michelle Donelan, looks to crack down on harmful content from discriminatory comments and scam advertisements to child pornography.

Businesses hosting user-generated content, ranging from social media platforms and search engines to cloud storage providers will be subject to the bill, and will need to take measures to minimise harm caused by content.

This can be through taking down existing posts that may be harmful; stopping potentially harmful content from being posted in the first place; and blocking access to pornography and other adult content by children.

Regulator Ofcom has been given power to penalise offending parties, wherever they are based, considering the global nature of the Internet.

As it stands, if found to be breaching the legislation, companies could be fined up to £18m or 10 per cent of annual turnover — whichever is higher.

Updates to the bill were announced back in April, with additional focus on scam advertisements hosted online that can be deemed “legal but harmful”, leading to a draft being published in May this year.

Earlier this month, Prime Minister Liz Truss announced that government would tweak the bill in the wake of free speech concerns.

Related:

How the Online Safety Bill can make the Internet safer for all Martin Wilson, CEO of Digital Identity Net, discusses how the Online Safety Bill can help to make the Internet safer for all users.

How the regulation of big tech can affect your business — The UK’s pending Online Safety Bill and the EU’s Digital Services Act are designed for the regulation of big tech, but there is the issue of legal but harmful and unintended consequences that can affect your business.

Avatar photo

Aaron Hurst

Aaron Hurst is Information Age's senior reporter, providing news and features around the hottest trends across the tech industry.