Comment by Kim_Bruning

The current EU-UK adequacy decision[1] is up for review this 27 June [2] .

Aspects of the UK investigatory powers act is close enough to US FISA [2] that I think this might have some influence, if brought up. IPA 2016 was known at the time of the original adequacy decision, but IPA was amended in 2024 . While some things might be improvements, the changes to Technical Capability Notices warrant new scrutiny.

Especially seeing this example where IPA leads to reduced security is of some concern, I should think. The fact that security can be subverted in secret might make it a bit tricky for the EU to monitor at all.

[1] https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL...

[2] ibid. Article 4

[3] FISA section 702 https://www.govinfo.gov/content/pkg/BILLS-110hr6304pcs/html/...