The information commissioner’s office has added its thoughts to those speaking out about the Draft Investigatory Powers Bill, warning that the rush to decrypt things, even if ordered to do so by a judge, is a potential threat to the general security of all personal data.
In its own submission to the Committee [PDF] that the rest of the tech world has been badgering, the ICO says: "Notices requiring the removal of electronic protection should not be permitted to lead to the removal or weakening of encryption. This technique is vital to help ensure the security of personal data generally," adding that an independent judicial commissioner that oversees demands for access is needed to "inspire public confidence" in the robustness of the new processes.
The ICO also say there'd better be a strong and very persuasive case made for the collation of Internet Connection Records, as this potentially bombshell data could: "...lead to a detailed and intrusive picture of an individual’s interest or concerns being retained and then disclosed. There is also increased risk to all individuals if such retained data are subject to a security breach and that detailed picture of their interests and activities becomes available to third parties."