Doğaner Doğanay works as a lawyer at <a href="https://turkishlawblog.com/contributors/detail/kavlak-law-firm" target="_blank" style="color: rgb(3, 102, 132);">Kavlak Law Firm</a>.He
graduated from Kadir Has University Faculty of Law in 2017. Later, in 2022, he
completed his master’s program in Information and Technology Law at Bilgi
University with his thesis titled “Assessment of the Rights of Esports Players
in Turkey and Their Personal Data Processed within the Esports Ecosystem”.He
continues his studies in the fields of Compliance, Data Privacy, Esports and IT
Law. He has ISO 27701 LA and ITIL certificates. Practice Areas &amp; Work DepartmentData ProtectionComplianceIT LawEsports LanguagesTurkish
English MembershipsIstanbul Bar Association

As an independent full-service law firm, KAVLAK provides
solutions and practical approaches for a wide range of legal issues to domestic
and international clients since 2006. Our team is experienced in providing
specialist expertise to clients based in the USA, UK and EMEA to reach their
significant potential for global expansion. KAVLAK has a high reputation in
providing legal services to innovative, technology-driven businesses.Our lawyers are recognized for practical legal and business
guidance and provide unique customized commercial advice to your business. We
have extensive experience and interdisciplinary approach to advising start-ups
on company formation, equity structures, Investments, IP rights and other
topics vital to their success. Over the
years, we have built a long track record of working in key industries and
markets, mainly legaltech, fintech, ecommerce, big data, supply chain
management &amp; logistics, AI, B2B software and leisure &amp;
entertainment.&nbsp;We provide legal
consultancy services to our clients by utilising our global network of start-up
ecosystem.

Kavlak Law Firm

Attorney at Law

&lt;p style="text-align: justify;">&lt;span style="font-family: Arial, Helvetica, sans-serif; font-size: 14px;">&lt;span style="font-size: 14px;">&lt;span style="font-size: 14px;">According to The Guardian[1],
there is a concern that encrypted messaging app companies, including WhatsApp,
might cease their services in the UK if the Online Safety Bill is not amended.&lt;/span>&lt;/span>&lt;/span>&lt;/p>&lt;p style="text-align: justify;">&lt;span style="font-family: Arial, Helvetica, sans-serif; font-size: 14px;">&lt;span style="font-size: 14px;">&lt;span style="font-size: 14px;">The Online Safety Bill (“&lt;/span>&lt;strong style="font-size: 14px;">Bill&lt;/strong>&lt;span style="font-size: 14px;">&lt;span style="font-size: 14px;">”) is a proposed
legislation in the UK aimed at enhancing internet safety and addressing online
harms. It seeks to hold companies accountable for the content shared on their
platforms and introduces measures to protect users, especially vulnerable
individuals like children.&lt;/span>&lt;/span>&lt;/span>&lt;/span>&lt;/p>&lt;p style="text-align: justify;">&lt;span style="font-family: Arial, Helvetica, sans-serif; font-size: 14px;">&lt;span style="font-size: 14px;">&lt;span style="font-size: 14px;">&lt;span style="font-size: 14px;">Under consideration, the Bill grants the Office of
Communications (“&lt;/span>&lt;strong>Ofcom&lt;/strong>&lt;span style="font-size: 14px;">”) the power to enforce regulations that require social
networks to utilize technology in combating terrorism and child sexual abuse
content. Services that do not comply may face fines of up to 10% of their
global revenue. The Bill also emphasizes the importance of companies making
diligent efforts to develop or obtain technology that aligns with the
regulatory obligations specified by Ofcom. This provision encourages social
networks to take proactive steps in addressing harmful content and prioritizing
user safety.&lt;/span>&lt;/span>&lt;/span>&lt;/span>&lt;/p>&lt;p style="text-align: justify;">&lt;span style="font-family: Arial, Helvetica, sans-serif; font-size: 14px;">&lt;span style="font-size: 14px;">&lt;span style="font-size: 14px;">&lt;span style="font-size: 14px;">However, messaging apps relying on end-to-end
encryption (“&lt;/span>&lt;/span>&lt;/span>&lt;strong style="font-size: 14px;">E2EE&lt;/strong>&lt;span style="font-size: 14px;">”) face a unique challenge in adhering to these regulations.
E2EE is a security measure that ensures secure communication and data privacy
between parties. It allows only the sender and intended recipient(s) to access
and understand the encrypted content while preventing unauthorized access. With
E2EE, data is encrypted on the sender's device and can only be decrypted by the
intended recipient(s).&lt;/span>&lt;/span>&lt;/p>&lt;p style="text-align: justify;">&lt;span style="font-family: Arial, Helvetica, sans-serif; font-size: 14px;">&lt;span style="font-size: 14px;">WhatsApp and Signal both employ E2EE to ensure secure
communication. When a message is sent, it is encrypted on the sender's device
using a unique lock and key. Only the intended recipient(s) can decrypt the
message using their private key. This ensures private and protected
conversations, with only the sender and recipient(s) having access to the
decrypted content.&lt;/span>&lt;/span>&lt;/p>&lt;p style="text-align: justify;">&lt;span style="font-family: Arial, Helvetica, sans-serif; font-size: 14px;">&lt;span style="font-size: 14px;">These apps argue that accessing user messages without
compromising E2EE would be technically infeasible and go against their
commitment to user privacy and security. Breaking the encryption would
undermine the trust placed in their platforms. It's important to note that
these platforms serve billions of users worldwide, with only a small percentage
residing in the UK. Given the choice between compromising security or
protecting their global user base, WhatsApp and similar providers seem inclined
to prioritize the security and privacy of their non-UK users.&lt;/span>&lt;/span>&lt;/p>&lt;p style="text-align: justify;">&lt;span style="font-family: Arial, Helvetica, sans-serif; font-size: 14px;">&lt;span style="font-size: 14px;">The government insists emphasizes the need to balance
privacy with public safety, particularly in combating crimes like child sexual
abuse. Although the Bill does not explicitly ban E2EE, the provisions create
uncertainty.&lt;/span>&lt;/span>&lt;/p>&lt;p style="text-align: justify;">&lt;span style="font-family: Arial, Helvetica, sans-serif; font-size: 14px;">&lt;span style="font-size: 14px;">As a result, messaging apps firmly assert that they
would not compromise the integrity of their encryption and the privacy of their
users' communications. A constructive resolution is necessary to address these
concerns and find a middle ground that respects privacy while ensuring online safety.&lt;/span>&lt;/span>&lt;/p>&lt;hr style="">&lt;p style="text-align: justify;">&lt;span style="font-family: Arial, Helvetica, sans-serif; font-size: 14px;">&lt;span style="font-size: 14px;">


&lt;strong>[1]&lt;/strong>&lt;span style="font-size: 14px;"> https://www.theguardian.com/technology/2023/may/08/whatsapp-could-disappear-uk-over-privacy-concerns-ministers-told&lt;/span>&lt;/span>&lt;/span>&lt;/p>

The proposed Online Safety Bill in the UK raises concerns that encrypted messaging app companies like WhatsApp may cease their services if the bill is not amended. The bill aims to enhance internet safety and hold companies accountable for content shared on their platforms. It grants regulatory power to the Office of Communications (Ofcom) to enforce measures against terrorism and child sexual abuse content. However, messaging apps relying on end-to-end encryption (E2EE) face challenges in complying with these regulations. E2EE ensures secure communication and data privacy, and breaking it would compromise user trust. Finding a middle ground is crucial to balance privacy and online safety.

Lawyers Doğaner Doğanay

Doğaner Doğanay

The Encryption Paradox: Messaging Apps at a Crossroads in the UK