Japan moves to let police read suspects' phones remotely to prevent crimes

On 24 September an expert panel at Japan's National Police Agency signed off on a proposal that would let police read the contents of a suspect's smartphone remotely, under a court warrant, before a crime has been committed. The agency plans to put a bill to the extraordinary session of the Diet expected in early October.

The detail that matters is which law they intend to change. This is not an amendment to criminal procedure, the body of law that governs gathering evidence in a case that already exists. It is the Police Duties Execution Act, the law about what police may do to prevent harm. That places the whole measure on the preventive side of the line, where the target is not a proven offence but an expected one.

What is actually being proposed

The panel was convened on 10 August and met five times, ending on 24 September with its formal recommendation. Its subject was narrow: technical measures against crime by anonymous, fluid criminal groups. Those groups, known in Japan as tokuryu, do not look like the old syndicates. People are recruited for single jobs through social media, the organisers often sit abroad, and coordination runs through apps with strong encryption and messages that delete themselves on a timer.

That last part is the stated problem. Once a phone has been identified as belonging to someone giving instructions, police want to reach into it and read what the group is planning: which victims have been picked, when, and how many people are involved. The purpose written into the proposal is prevention of the crime, not proof of one.

Nobody is breaking the encryption

It is worth being precise, because the headline version of this story will be "Japan cracks encrypted messengers", and that is not what is happening. End-to-end encryption protects a message while it travels. On the two devices at either end, the message is plain text, because otherwise the person could not read it. Reach the endpoint and the encryption is intact, irrelevant and bypassed all at once.

This is the direction states have been moving in for several years, precisely because the cryptography holds. We wrote about the same move in a different form when the UK proposed scanning images inside the phone, and about the version that failed at the protocol level when Chat Control passed in the EU with an exception for encrypted services. Japan's version skips the argument with the maths entirely.

The limits written into the proposal

The safeguards are more specific than is usual in this kind of measure, which is itself worth noting.

Notification of the person whose phone was read is the unusual one. Most surveillance powers of this type never tell the subject anything. Whether that survives contact with a parliament and a police budget is a separate question, and it is the clause worth watching as the bill is drafted.

The part that is genuinely contested

Japan's constitution protects the secrecy of communications in Article 21, in language that is short and absolute. A power to read private messages, granted for prevention rather than prosecution, runs directly at that text, and the proposal's own safeguards read like an attempt to answer the objection in advance.

There is also the ordinary problem with preventive powers, which is that the category never stays where it was drawn. This one begins with organisers of fraud and robbery rings. Every element of the definition, from "serious harm" to "no other means", is a judgement call made by the people who want the access. That is not an argument that the power is wrong. It is an argument for reading the final text rather than the press release.

Does any of this change what a reader should do

For almost everyone reading this, no, and it is worth saying so plainly rather than attaching a recommendation to a story that does not carry one. A VPN is irrelevant here. It protects traffic in transit; this measure reaches the device, after decryption, where a tunnel has no role at all. The same goes for choosing a messenger with better cryptography: the proposal is indifferent to which app the messages sit in.

What does matter is device security, which is the actual surface being discussed: an up to date operating system, a strong passcode rather than a four digit one, and awareness that a phone holds the plain text of everything its owner has ever sent. That is true regardless of what Japan's Diet decides. The same lesson turned up this week in a very different jurisdiction, when researchers described per-account surveillance switches in Russia's state messenger.