EU’s Plan to Unlock Encryption by 2030 Raises Privacy Concerns

The European Commission has unveiled a roadmap for improving law enforcement’s access to digital evidence, with a particular focus on the challenge of encrypted data. The plan, part of the ProtectEU strategy, seeks to develop methods for ‘lawful’ access to citizens’ private data by 2030. It includes initiatives to strengthen data retention, improve cross-border cooperation for lawful data interception, and explore decryption solutions. A key part of the strategy is to equip Europol officers with the tools necessary to decrypt encrypted communications, particularly from VPNs and messaging apps. The commission also aims to push for the standardization of these methods and promote the use of AI tools by 2028 to help law enforcement process large volumes of data. However, privacy experts are sounding alarms, warning that breaking encryption could introduce vulnerabilities that would be exploited by malicious actors. Critics argue that weakening encryption could ultimately compromise European cybersecurity, with concerns raised that these measures might infringe on the right to privacy. Despite this, the EU Commission maintains that it is seeking a balance between enabling effective law enforcement and maintaining robust cybersecurity protections.