Terrorist suspects forced to hand over encryption keys
The police have the power to put you in jail if you don’t hand over encryption keys to the data they want.
Defendants will have to give encryption keys to police even if the data it unlocks incriminates them, a British appeals court has ruled.
An appeals court has heard the case of two defendants who were arrested under the terrorism prevention act. One suspect's homes was searched, revealing computer material which was partially encrypted.
The Regulation of Investigatory Powers Act imposed a legal obligation for them to reveal the full encryption keys and allow access to the encrypted material, the ruling said. However, the suspects appealed, claiming that it was incompatible with the privilege against self-incrimination.
The appeals ruling said that as the encryption key was no different to a physical key, it existed separately from their will and so the self-incrimination defence couldn't be used.
The court said: "The key to the computer equipment is no different to the key of a locked drawer. The contents of the drawer existed independently of the suspect; so did the key to it. The contents might or might not be incriminating; the key was neutral."
It is Part three of the RIPA act which requires people under particular circumstances to supply encryption keys to particular authorities. It has caused controversy as a failure to disclose decrypted data could lead to a penalty of up to two years in jail.
Critics have said that law enforcement could cost businesses by mishandling this data, with some of the provisions complex and even unworkable.
The case for a marketing content hub
Transform your digital marketing to deliver customer expectationsDownload now
Fast, flexible and compliant e-signatures for global businesses
Be at the forefront of digital transformation with electronic signaturesDownload now
Why CEOS should care about the move to SAP S/4HANA
And how they can accelerate business valueDownload now
IT faces new security challenges in the wake of COVID-19
Beat the crisis by learning how to secure your networkDownload now