EU Experts Warn Against Weakening Encryption in ProtectEU Plan
The European Union’s plan to introduce a legal backdoor into encrypted communications under the ProtectEU strategy has raised significant concerns among experts in cybersecurity and digital rights. On May 26, 2025, 89 signatories from the tech industry, including leading VPN and email providers, civil society organizations, and cybersecurity specialists, jointly urged the European Commission to reconsider its approach. They emphasized the critical role of strong encryption in safeguarding privacy and security for individuals, businesses, and public institutions.
Encryption is essential for securing data by converting it into unreadable code, which protects communication services like Signal, WhatsApp, and Proton Mail. While law enforcement agencies argue that encryption hinders criminal investigations, rising cyberattacks worldwide have led even government bodies such as the FBI and CISA in the United States to recommend end-to-end encrypted services to enhance security. The European Commission has also previously recognized encryption as vital for maintaining the integrity of cyberspace.
The ProtectEU strategy aims to enhance the EU’s cybersecurity but includes a controversial plan to create encryption backdoors. Experts warn this approach could undermine security objectives by weakening encryption, increasing vulnerability to cyberattacks. The signatories, including Proton, Surfshark, Tuta Mail, Mozilla, and Element, stress that weakening encryption compromises secure communications and systems, exposing users to greater risks.
The European Commission’s efforts to weaken encryption are not new; previous attempts like the Chat Control proposal to scan citizens’ communications have faced strong opposition and legal challenges. Experts now call for a balanced Technology Roadmap on Encryption that considers technological feasibility, societal impact, and legal implications, involving industry stakeholders alongside law enforcement. They argue that undermining encryption threatens not only security but also human rights and accountability.
