Steptoe Cyberlaw Podcast

Our headline story for this episode of the Cyberlaw Podcast is the U.K.’s sweeping new Online Safety Act, which regulates social media in a host of ways. Mark MacCarthy spells some of them out, but the big surprise is encryption. U.S. encrypted messaging companies used up all the oxygen in the room hyperventilating about the risk that end-to-end encryption would be regulated. Journalists paid little attention in the past year or two to all the other regulatory provisions. And even then, they got it wrong, gleefully claiming that the U.K. backed down and took the authority to regulate encrypted apps out of the bill. Mark and I explain just how wrong they are. It was the messaging companies who blinked and are now pretending they won.  In cybersecurity news, David Kris and I have kind words for the Department of Homeland Security’s report on how to coordinate cyber incident reporting. Unfortunately, there is a vast gulf between writing a report on coordinating incident reporting and actually coordinating in