New Mexico's Meta Ruling Could Make Encryption a Legal Liability
A New Mexico court ruling against Meta is being used to argue that adding end-to-end encryption to Facebook Messenger was itself a negligent design choice - because it made it harder for law enforcement to access communications used by predators. The state is now seeking remedies that would explicitly weaken encrypted communications to protect minors, setting a precedent where implementing stronger privacy protections can be treated as evidence of harm enablement.
The ‘design liability’ framework is the core danger here. If a security improvement that benefits billions can be held against a company because a small fraction of bad actors also benefit, the rational corporate response is to stop shipping those improvements. The same logic applies to any communication channel - postal mail, phone calls, in-person meetings - but encryption is the current target. Every major security organization supports stronger encryption precisely because it protects ordinary people from surveillance, abuse, and authoritarian overreach.
A second, subtler consequence may be worse long-term: internal safety deliberations are becoming plaintiff’s exhibits. When engineers document risk tradeoffs in good faith and those documents get characterized as ‘they knew and did nothing,’ companies stop writing things down. Risk assessments disappear. Safety teams go quiet. The legal incentive structure now rewards corporate ignorance over internal scrutiny - the opposite of what produces safer products.
Read the full article
Continue reading at Schneier on Security →This is an AI-generated summary. Read the original for the full story.