US lawmakers scrutinize UK surveillance law over encryption backdoor concerns

A backdoor compelled by one ally becomes a standing invitation to Beijing
Former defense official Andrew Badger explains why encryption backdoors demanded by allies create permanent vulnerabilities for all Western nations.

In the quiet architecture of allied trust, a legal mechanism buried in British surveillance law has surfaced a question that democracies have long deferred: who guards the guardians of encrypted communication? Rep. Jim Jordan's challenge to the UK Home Secretary over secret Technical Capability Notices reflects a deeper reckoning — that a backdoor created for one friend's convenience becomes a door held open for every adversary. The Salt Typhoon intrusions demonstrated this is not theory but precedent, and the burner phone carried into Beijing by a British foreign secretary is perhaps the most honest admission of where that contradiction leads.

  • Secret British legal notices can compel American tech companies to silently hollow out their own encryption — with no right to tell Congress it happened.
  • Former defense officials warn the precedent is irreversible: a backdoor demanded by London today is a blueprint handed to Beijing, Moscow, and Tehran tomorrow.
  • Chinese state hackers from Salt Typhoon didn't break encryption — they walked through the lawful-intercept systems governments had already built, reaching senior Western officials' communications.
  • The Five Eyes intelligence alliance, built on mutual trust in shared infrastructure, faces fracture if Washington concludes British surveillance powers are inadvertently creating exposure for American officials.
  • Britain's own Foreign Secretary traveled to Beijing with a burner phone — a precaution that quietly concedes the contradiction at the heart of UK policy: pursuing trade with a nation it treats as a hostile intelligence threat.

In early June, Rep. Jim Jordan sent a letter to Britain's Home Secretary raising alarm over Technical Capability Notices — secret legal instruments embedded in the UK's Investigatory Powers Act that can compel American technology companies to create encryption backdoors while forbidding them from disclosing the demand to anyone, including Congress. Jordan's letter suggested the power had already been used to silence an American company that wished to speak with lawmakers.

The strategic stakes, as former Defense Department official Andrew Badger framed them, extend well beyond any single company or request. If one allied government can quietly mandate a backdoor, others will follow — and adversaries will not wait for an invitation. China, Russia, and Iran would see the precedent and press for equivalent access, transforming a one-time concession into a permanent structural vulnerability in the very infrastructure Western governments use for sensitive communication.

The concern is not hypothetical. Chinese state-sponsored hackers operating as Salt Typhoon executed one of the largest cyberespionage campaigns on record, penetrating communications across roughly 80 countries — not by cracking encryption, but by moving through the lawful-intercept systems that telecom providers had already constructed. Britain was among the targets: Downing Street phones were breached, and an Electoral Commission hack exposed data on approximately 40 million voters.

The contradiction embedded in British policy sharpens the dispute. When Foreign Secretary Yvette Cooper traveled to Beijing, she carried a burner phone — a precaution no one takes for trips to allied capitals. That single detail encapsulates the tension: the UK government is simultaneously deepening economic engagement with China and treating it as a hostile intelligence threat serious enough to warrant disposable devices. Backdoor mandates, critics argue, make that contradiction not merely uncomfortable but dangerous — for Britain's allies as much as for Britain itself.

In early June, Rep. Jim Jordan, the Ohio Republican who chairs the House Judiciary Committee, sent a letter to Britain's Home Secretary raising alarm about how the U.K. is wielding its surveillance powers. At the center of his concern: secret legal notices that could force American technology companies to weaken their encryption systems—and do so in silence, forbidden from telling Congress or anyone else what happened.

The mechanism in question is called a Technical Capability Notice, a tool buried in the U.K.'s Investigatory Powers Act. According to critics, these notices allow British authorities to compel tech firms to create what amounts to backdoors into encrypted communications, while simultaneously gagging those companies from disclosing the request. Jordan's letter suggested the U.K. Home Secretary had already used this power to silence an American company that wanted to speak with lawmakers about exactly such a demand.

The worry extends far beyond privacy. Andrew Badger, a former Department of Defense official, laid out the strategic calculus in stark terms: if one allied nation can quietly force a backdoor into encryption, others will follow. China, Russia, Iran—all would see the precedent and demand the same access. What begins as a one-time concession hardens into a permanent vulnerability, baked into the infrastructure that Western governments and officials depend on for sensitive communication. "A backdoor compelled by one ally becomes a standing invitation to Beijing, Moscow and Tehran," Badger told Fox News Digital.

The concern cuts to the heart of the Five Eyes alliance, the intelligence-sharing partnership between the U.S., U.K., Canada, Australia, and New Zealand. That partnership rests on a fundamental assumption: that each member trusts the others not to weaken the systems all of them rely on. If Washington concludes that British surveillance powers could inadvertently expose American officials to espionage, the trust fractures. Future cooperation on intelligence and cyber operations becomes harder to sustain.

The timing of Jordan's challenge is sharpened by recent history. Chinese state-sponsored hackers, operating under the banner of Salt Typhoon, have conducted one of the largest cyberespionage campaigns ever documented, targeting hundreds of organizations across roughly 80 countries. They didn't crack encryption. They walked straight through the lawful-intercept systems that telecom providers had built—the very kind of backdoor access that Technical Capability Notices could create. Through those intrusions, they reached the communications of senior Western officials.

Britain itself has been a target. Chinese hackers breached senior officials' phones at Downing Street. An Electoral Commission breach exposed the data of roughly 40 million British voters. The threat is not theoretical. It is so concrete that when U.K. Foreign Secretary Yvette Cooper traveled to Beijing recently, she carried a burner phone—a disposable device used for a single trip, then discarded. The precaution speaks volumes. No one issues burner phones for trips to Sweden or Germany. The working assumption, correctly held, is that anything digital carried into China should be treated as potentially compromised.

This creates a fundamental contradiction in British policy, Badger argued. The U.K. Labour government is simultaneously pursuing expanded economic ties with Beijing and treating China as a hostile intelligence threat. You cannot trust a nation as both a trading partner and an adversary. The need for burner phones is an admission that the contradiction cannot be resolved—only managed, uneasily, through precautions that underscore the depth of the threat.

A backdoor compelled by one ally becomes a standing invitation to Beijing, Moscow and Tehran
— Andrew Badger, former Department of Defense official
Five Eyes works because every partner trusts the others not to weaken the systems they all depend on
— Andrew Badger
The Hearth Conversation Another angle on the story
Inventor

Why does it matter if one country's surveillance law affects American companies? Isn't that a British domestic issue?

Model

Because encrypted systems are global infrastructure now. When the U.K. forces Apple or Microsoft to weaken encryption, that weakness doesn't stay in Britain. It becomes a vulnerability in the system everyone uses—American officials, European diplomats, journalists everywhere.

Inventor

But couldn't the U.K. just ask for help? Why the secrecy?

Model

That's exactly Jordan's point. The secrecy is the problem. If a company can't tell Congress or the public that it's been ordered to create a backdoor, there's no oversight, no debate, no chance to push back. And once one ally does it quietly, others demand the same.

Inventor

So the fear is that China will use this as cover?

Model

Worse than cover. China will point to it and say, "If Britain can demand this, so can we." And they already have the capability to exploit it. Salt Typhoon proved that. They don't need to crack encryption if they can walk through a backdoor someone else built.

Inventor

Is the U.K. actually trying to spy on Americans?

Model

The evidence doesn't suggest intentional targeting. But intent doesn't matter if the result is the same. A backdoor is a backdoor. Once it exists, hostile actors will find it.

Inventor

What does the burner phone story tell us?

Model

It tells us the U.K. government knows China is a threat. But they're also trying to do business with China. That contradiction—treating Beijing as both partner and adversary—is unsustainable. The burner phone is what that contradiction looks like in practice.

Contact Us FAQ