In the bustling auditorium of TechCrunch Disrupt 2023, a statement echoed that could redefine the digital landscape of the U.K. Meredith Whittaker, the formidable president of the Signal Foundation, made it clear: Signal might bid adieu to the U.K. if a new law compromises its encryption standards. But what is this law, and why is it causing ripples in the tech community?
The Heart of the Matter: The Online Safety Bill
Passed in September, the U.K.’s Online Safety Bill has been the talk of the tech town. At its core, the bill aims to make the online world safer by curbing illegal content. However, clause 122 has become a bone of contention. Depending on its interpretation, this clause might empower the U.K.’s communications regulator, Ofcom, to decrypt apps and services. The goal? To ensure the removal of illegal material, such as content related to child exploitation.
The stakes are high. Companies that don’t toe the line could face fines up to £18 million ($22.28 million) or 10% of their global annual revenue, whichever digs deeper.
Signal’s Stance: Privacy Above All
Whittaker, representing Signal, a nonprofit messaging app known for its staunch commitment to user privacy, didn’t hold back her concerns. “We would leave the U.K. or any jurisdiction if it came down to the choice between backdooring our encryption and betraying the people who count on us for privacy, or leaving,” she declared.
She emphasized that Signal’s potential exit from the U.K. isn’t a mere political stunt. The real concern lies in the potential surveillance regime that the bill might usher in. For Signal, the ethos is clear: collect minimal data to ensure maximum privacy. In fact, when asked about the kind of data Signal has handed over upon receiving search warrants, Whittaker’s response was straightforward: just the phone number linked to a Signal account and the last access time. Nothing more.
Why This Matters: The Global Implications
Signal’s dedication to privacy isn’t just a company policy; it’s a philosophy that has garnered them a user base of approximately 40 million monthly active users as of January 2022. Their potential exit from a significant market like the U.K. could set a precedent for other tech companies.
Whittaker’s vision for the future is clear: encrypted messaging should be the norm. She draws hope from industry giants like Meta, which plans to introduce end-to-end encryption on platforms like Facebook Messenger and Instagram, even in the face of the U.K.’s Online Safety Bill.
Whittaker’s parting thought at TechCrunch Disrupt 2023 was a reflection on the age-old norms of communication. For centuries, private conversations have remained just that – private. In the digital age, should this norm change?
As the U.K. navigates the implementation of the Online Safety Bill and tech giants like Signal grapple with its implications, the world watches closely. The outcome could redefine the delicate balance between online safety and digital privacy.
Signal’s origins trace back to the United States, specifically to the encrypted voice application called RedPhone and the encrypted texting program named TextSecure, both developed by Whisper Systems. Whisper Systems was founded by Moxie Marlinspike and Stuart Anderson in 2010.
Signal, as an app, became available for download globally, including in the UK, once it was launched. Its adoption in the UK, like in many other countries, grew organically due to its strong emphasis on privacy and end-to-end encryption. Over time, as privacy concerns increased globally and as other messaging platforms faced controversies, Signal’s user base in the UK and elsewhere expanded.