Meta Platforms Inc. has removed the optional end-to-end encryption feature for Instagram direct messages globally, effective May 8. Private conversations will now use "standard encryption," which protects messages during transit but allows Meta to access them on its servers.
Digital rights advocates and policy experts are concerned about this rollback, viewing it as a significant concession that shifts the balance between user privacy and corporate responsibility.
Low Adoption Claim Questioned
Meta stated that "very few people were opting into" the encrypted chat feature on Instagram, suggesting users preferred WhatsApp for secure communication. However, tech policy experts like Raman Jit Singh Chima of Access Now argue this justification is disingenuous. He stated that Meta's decision sends a negative signal to the tech industry, implying that compromising secure communications under government pressure is acceptable. Critics argue that by making encryption optional rather than default, Meta has redefined user autonomy.
Privacy Reimagined as a Product Feature
Apar Gupta, founder director of the Internet Freedom Foundation, described the shift as a dangerous development in digital governance. He noted that Meta is reframing privacy from a fundamental right to a mere product metric. This contrasts with companies like Apple, which have resisted weakening encryption, and Signal, which threatened market exits. Meta has chosen a path of quieter compliance.
Law Enforcement vs. Security Experts
Law enforcement and child protection groups have welcomed the move, arguing that strong encryption obstructs investigations into child abuse, cyber-harassment, and terrorist activities. However, digital security experts question the effectiveness of disabling encryption in addressing online harm. They suggest that sophisticated malicious actors will move to specialized encrypted services, leaving ordinary users more vulnerable. This change also creates a large new pool of data, raising concerns about corporate data breaches, state surveillance, and cyber-scams.
Data for AI Training
The decision also aligns with the increasing demand for data to train generative artificial intelligence models. Private text conversations contain nuanced human interactions valuable for Large Language Models (LLMs). By removing encryption, Meta can now index and analyze millions of Instagram direct messages. Critics like Gupta suggest "safety" is being used as a pretext for data extraction, as private messages represent valuable conversational data.
India's Regulatory Landscape
For users in India, this change occurs amidst ongoing disputes between the Indian government and Meta over the "Traceability Mandate." This mandate requires platforms to identify the "first originator" of messages, a requirement WhatsApp has contested as a violation of encryption. Instagram's unencrypted messages provide a straightforward path for the government to comply with such orders under Section 69 of the IT Act. The situation is further complicated by the delayed implementation of India's Digital Personal Data Protection (DPDP) Act, leaving consumers with limited leverage against corporate data harvesting.
