Meta's Head of WhatsApp, Will Cathcart, says the service would refuse to comply with the UK's Online Safety Bill requirements to remove end-to-end encryption
The GuardianAlex Hern
Context & Ripple Effects
Cathcart had already warned ministers that weakening encryption in the bill would have consequences beyond the UK. WhatsApp’s refusal turns that earlier warning to UK ministers into an explicit operating position.
The dispute subsequently broadened: encrypted messaging services jointly urged the government to rethink the bill, and Apple also argued for protections for encryption. The issue is therefore not solely Meta’s compliance posture but whether the UK’s approach can secure cooperation from major private-messaging providers.
First-order effects
WhatsApp commits not to remove end-to-end encryption to meet the bill’s stated requirement, putting its UK service policy in direct conflict with the government’s proposed compliance framework.
UK ministers must confront a prominent service’s declared resistance rather than assume that encryption-related obligations will be implemented voluntarily.
Apple’s subsequent intervention over message-scanning requirements aligns a major platform with WhatsApp’s position, increasing pressure to distinguish safety obligations from measures that weaken encryption.
Third-order effects
If governments pursue access or scanning mandates while providers maintain refusal policies, encryption regulation will increasingly be settled through conflicts over enforceability and service availability rather than technical compliance alone.
The pattern points to access-control rules becoming a cross-platform governance issue: messaging services and device platforms have incentives to defend encryption as a common product boundary.
The trend: Encryption policy is becoming a test of whether national online-safety rules can impose access requirements on global communications platforms without breaking their privacy commitments.
The UK's Online Safety Bill is poised to undermine encryption and create a regime of mass surveillance. Our president @mer__edith calls on the UK to reconsider this misguided Bill, and affirms that Signal will *never* undermine our privacy commitments: https://signal.org/...
Major props to @wcathcart and @whatsapp. Journalists covering this should take time and steps to explain that “weakening security” includes (e.g.) leaving the encryption unchanged and instead adding content-scanning software to the app. https://www.bbc.com/... https://twitter.com…
2 thoughts on this intervention: @WhatsApp are again threatening to withdraw from the U.K over the use of technology to detect child abuse they *already* use to detect malware. How does one use case ‘break’ end-to-end encryption but the other is fine? https://www.bbc.com/...
“We've never seen a liberal democracy remove end-to-end encryption” WhatsApp would not remove end-to-end encryption for UK law, says chief https://www.theguardian.com/ ...
Makes sense. If there's a big data breach in the UK because of weakened security and, eg, users' nudes and private chats are all leaked, that will destroy Whatsapp's reputation worldwide. People won't blame the crappy law that caused it. https://www.bbc.com/...
these apps are bigger than a single island. They'll just stop serving those isolated on the island, providing even less protection against mass surveillance. (Ofcourse some MP's cousin will get a massive contract to make Brexchat just like the failed covid tracker app) https://tw…
“There isn't a way to change it in just one part of the world... Ninety-eight per cent of our users are outside the UK. They do not want us to lower the security of the product.” - @wcathcart The #OnlineSafetyBill puts users' privacy and security at risk. https://www.theguardian.…
UK will ban WhatsApp because it won't remove e2e encryption. These bans are enforceable because private chat apps have consolidated under 3 or 4 companies, and all app distribution funnels through app stores owned by 2 companies. https://www.theguardian.com/ ...
As I've stated to the British Parliament, I am strongly opposed to blanket requirements that would effectively outlaw end-to-end encryption in the United Kingdom. I may have disagreements with Meta, but I agree with WhatsApp in this regard. https://www.theguardian.com/ ...
Truly is a sweet twist of irony when the western world in one hand wants to ban #TikTok for their security concerns and weaken end to end encryption for their snooping requirements. #WhatsApp would not remove end-to-end encryption for UK law, says chief https://www.theguardian.co…
How to kill innovation: the #OnlineSafetyBill edition. So far, the UK with its plans on #encryption will be making it impossible for @signalapp, @ProtonPrivacy & @WhatsApp to operate The need to smart and fit for purpose regulation has never been greater. https://www.bbc.com/...
@MikeIsaac Given the discussions in Congress on content moderation and kids online/proposals like EARN IT, I think it's only a matter of time before the subject comes back around here.