FOIA doc: Australian police can use new encryption legislation to compel social media giants, telcos, retailers, and Wi-Fi providers to provide info on users
Exclusive: Documents reveal rushed encryption legislation allows police to compel wifi providers to turn over information about users Tweets: @blakandblack , @zackwhittaker , @nick__nobody , @recordio_ , and @mehreenfaruqi Tweets: @blakandblack : The #aabill in action: burger, fries and an intercept! People accessing the internet at McDonald's and Westfield in Australia could be targeted for surveillance by police under new encryption legislation, according to the home affairs department. #auspol https://www.theguardian.com/ ... Zack Whittaker / @zackwhittaker : Documents reveal rushed encryption legislation allows police to compel wifi providers to turn over information about users. https://www.theguardian.com/ ... Dr Nobody / @nick__nobody : Hey @AustralianLabor thanks for passing the #AABill and giving Uber Minister Dutton the power to spy on everyone while destroying Australia's IT industry. This isn't even the No.1 reason you didn't get my first preference #auspol https://www.theguardian.com/ ... @recordio_ : https://www.theguardian.com/ ... Australia's rushed encryption laws (passed in Dec 2018 under the guise of “stopping pedophiles and terrorists") are extrodinarily powerful. Dutton's department now can access data centres to install physical surveilance hardware on devices... (1/3) Mehreen Faruqi / @mehreenfaruqi : Hate to say we told you so. The #AABill was opposed by the tech industry, civil & digital rights orgs, peak legal bodies & the @Greens. But Labor ignored the experts and voted for these gross privacy invasion and security org overreaches #auspol https://www.theguardian.com/ ...
Context & Ripple Effects
When Peter Dutton's home affairs department pushed through what critics called rushed encryption legislation in late 2018, the argument was that it targeted terrorists via telcos — despite warnings from experts and the bill's passage over tech industry objections. This week's FOIA documents show how wide that net actually casts: the Assistance and Access framework lets police compel not just carriers but social media companies, retailers, and anyone operating public Wi-Fi.
The concrete example in the documents — users at McDonald's and Westfield hotspots being identifiable to police — turns the bill from an abstract crypto fight into a mass-surveillance question, echoing the compliance confusion that met Australia's earlier data retention laws.
First-order effects
- Australian police gain a documented pathway to demand user information from businesses that merely provide internet access — fast food chains, malls, cafés — without those operators having done anything beyond offering free Wi-Fi.
Second-order effects
- The disclosure hands ammunition to the tech companies and Labor/Greens critics who opposed the original bill, forcing the government to defend a scope far broader than its terrorism framing; internationally, it becomes Exhibit A in the Five Eyes-plus push for encryption backdoors.
Third-order effects
- If the pattern holds, each Australian powers-expansion builds on the last — this FOIA reveal precedes the 2021 bill letting police hack devices and take over accounts without a warrant — normalizing compelled assistance from any connected business and making 'connectivity provider' synonymous with potential state informant.
The trend: Australia is layering surveillance mandates onto ever-wider classes of network operators, with each new law inheriting and extending the compulsory-assistance template of the last.