The move will ensure that Meta's users are protected from abusive legal requests from non-democratic governments.
Globally the company receives hundreds of thousands of government requests for user data annually, according to its transparency center - including thousands from Mexico in the first half of this year, which the company assessed only 56% of were legitimate.
However the implementation of end-to-end encryption, which means Meta cannot itself access the content of messages even if it received a legal order to do so, has provoked enormous concern from law enforcement agencies in democratic countries.
More than 87% of the United Kingdom's 9,710 requests for user data were answered between January and June.
Meta currently submits thousands of reports to the U.S. National Center for Missing & Exploited Children annually when it detects child predators on its platforms attempting to contact children, alongside millions of reports when users upload media containing child sexual exploitation.
NCMEC warned that 70% of these reports - and as many as 85% to 92% according to the NCA - could be lost due to the implementation of E2EE, which they argue will blind Meta's monitoring teams to content that reveals abusive behaviors.
The company in turn claims that it is able to use other signals such as the metadata of chats and messages to detect predators, similar to the tools it uses with WhatsApp.
Security officials in Britain have argued that these signals are insufficient, noting that the bar is much lower for Meta to ban users based on suspect signals than it is for law enforcement to prosecute offenders and safeguard children.
Officials also argue that unlike WhatsApp - where a person needs some prior knowledge of another user's number in order to contact them - Meta's platform is designed to help people discover other users.
According to the British government, Meta's reports to NCMEC led in 2017 to more than 2,500 arrests and almost 3,000 children being safeguarded in the United Kingdom alone.
Meta has introduced a number of safety features to secure the accounts of underage children, and says alongside developing new technologies to protect children it works with industry and non-governmental organizations to regularly keep these updates.
Although Meta has long used the Signal protocol to secure messaging for WhatsApp users, as explained in a white paper explaining how the company implements E2EE, the new system on its social media platforms will also use something the company calls its Labyrinth Protocol to handle server-side storage of messages.
It is not yet explicit whether the server-side storage system could allow Meta to decrypt messages for law enforcement if the company received a warrant.
The British government has been campaigning against Meta introducing the technology for years, with Squires - now the director general for Homeland Security - writing to the U.S. Senate Judiciary Committee back in 2019.
In her written testimony, Squires attempted to build support in Congress for Britain's technical capability notice regime, introduced in the Investigatory Powers Act, which could enable the British government to require Meta to preserve its ability to deliver message content when separately served with a warrant.
As previously reported by Sky News, there are significant concerns about whether such a power could be used on a company based in the United States without congressional approval.
The law also includes a legal obligation for companies not to make changes that would later make it impossible to comply with a technical capability notice, although Meta's rollout on Thursday precedes this amendment becoming law.
He was previously a technology reporter for Sky News and is also a fellow at the European Cyber Conflict Research Initiative.
This Cyber News was published on therecord.media. Publication date: Fri, 08 Dec 2023 16:20:14 +0000