Encryption

Tutanota is one of the few email providers that encrypt all incoming emails by default. However, a ruling by the Cologne Regional Court is now forcing the Hanover-based company to install a function with which investigators can monitor individual mailboxes and read emails in plain text.

According to a request under the Municipal Freedom of Information and Protection of Privacy Act filed by the Mercury Tribune, the Guelph Police Service (GPS) has confirmed that a device called GrayKey has been acquired from the Atlanta-based technology company Grayshift.

The device enables low enforcement to unlock and copy data on iPhones. GPS stated in the letter that the GrayKey device "is used only by our technological crimes detectives" but that the agency has no internal policy or procedural documents and that no usage guidelines have been issued.

The "Lawful Access to Encrypted Data Act", introduced by senators Graham, Blackburn, and Cotton would force manufacturers of devices and systems with encryption to be able to decrypt data upon request of public authorities or court orders.

The law is tied to other regulations regarding surveillance and national security including Section 215 of the Patriot Act. For technology companies, the only reason to not unencrypt data would require proof that it is "technically impossible" and then they could be forced by the government to redesign their systems.