EU's ProtectEU Strategy Reopens the Fight Over Encryption Backdoors

The European Commission has unveiled ProtectEU, a multi-year internal security strategy that once again targets end-to-end encryption. Framed as a broad ‘vision and workplan’ rather than concrete legislation, it invokes rising threats from hostile states, organized crime, terrorism, and cybercrime to justify six focus areas — one of which, ‘more effective tools for law enforcement,’ is where encryption is squarely in the crosshairs. The Commission avoids the word ‘backdoor,’ instead calling for roadmaps toward ‘lawful and effective access to data’ and ‘technological solutions for accessing encrypted data.’

The core objection from technologists and privacy advocates is unchanged: encryption is not just a privacy feature but the mechanism that secures communications, financial transactions, and critical systems. The Commission’s assurance that fundamental rights and cybersecurity will be preserved alongside any access mechanism runs into a basic technical reality — a backdoor built for law enforcement is a backdoor available to everyone, including the hostile states and criminals the strategy claims to defend against. There is no way to weaken encryption for one party only.

Beyond encryption, ProtectEU pushes centralization on other fronts: deeper intelligence sharing among member states through the Single Intelligence Analysis Capacity (SIAC), and expanded powers for Europol to run cross-border and large-scale investigations, moving it toward becoming a ‘truly operational’ police agency. The strategy sets no binding policy yet, but it signals renewed political momentum for legislation that the tech and civil-liberties communities have repeatedly warned is technically unworkable and dangerous.