Australia passes sweeping anti-encryption bill giving police power to implant malware and insert backdoors, despite opposition from experts, tech companies
Australia's controversial anti-encryption bill is one step closer to becoming law, after the two leading but sparring party political giants struck …
Context & Ripple Effects
This bill closes a loop that opened in mid-2017, when Canberra first proposed forcing tech companies to decrypt messages in a law explicitly modeled after the UK's Investigatory Powers Act. Home Affairs Minister Peter Dutton drew fire months before passage for rushing the legislation through parliament over objections from tech companies that it would weaken encryption.
The passage matters because the compulsion net turned out wider than the headline fight over messaging apps suggested: a later [[a:942159|FOIA disclosure showed police can compel social media giants, telcos, retailers, and even Wi-Fi providers]] under the new powers. And the ratchet kept turning — by 2021 Australia passed a follow-on bill extending police hacking to modifying or deleting device data without a judge's warrant.
First-order effects
- Tech companies serving Australian users now face legal demands to insert backdoors or hand over decrypted data, with experts' warnings about weakened encryption overridden by the two major parties' deal.
- Australian police gain immediate authority to implant malware on targets' devices, operationalizing surveillance powers that previously required cooperation companies were refusing to give voluntarily.
Second-order effects
- The compliance burden spreads well past Silicon Valley: the FOIA record confirms retailers, telcos, and Wi-Fi providers can be compelled for user information, pulling businesses with no encryption expertise into surveillance obligations.
- Because the law was deliberately built on the UK's Investigatory Powers Act template, its passage hands other governments a working legislative blueprint, pressuring peers in the Five Eyes orbit to draft equivalents rather than negotiate with platforms bilaterally.
Third-order effects
- The 2021 expansion — hacking devices and taking over social accounts without a judicial warrant — shows the structural pattern: surveillance powers granted as exceptional tend to widen in scope and shed oversight constraints once the legal machinery exists.
- If the UK-model-to-Australia-adoption sequence repeats, encryption weakening stops being a per-country negotiation and becomes a harmonized state capability, forcing platform operators to treat government backdoor demands as a default design constraint rather than a jurisdictional edge case.
The trend: Governments are converting encryption from a technical guarantee into a legally compellable service, with Australia's UK-modeled law serving as the replicable template and each successive bill widening the original powers.