News Item

People in the EU value encryption and express concern about unauthorised access to their private communications

Password in phone for security and privacy. Mobile lock for safety to protect data in bank from scam or fraud.
terovesalainen / adobestock.com, 2026
Most people in the EU consider encryption important for protecting their private online communications, according to new survey findings from the EU Agency for Fundamental Rights (FRA). Many people are also concerned – to varying degrees – that their private communications may be accessed without their knowledge or consent by various actors, including criminals, foreign governments, businesses or law enforcement.

Encryption is important for safeguarding privacy, personal data and cybersecurity. But it can also make it harder for police to collect digital evidence in criminal investigations. This is why the EU and Member States are examining if it is possible to ensure lawful and effective access to data for law enforcement, while safeguarding cybersecurity and fundamental rights, including the privacy of personal communications.

FRA’s paper ‘Encryption and concerns about access to private online communication’ presents people’s views on the importance of encryption for protecting their privacy. It also reveals people’s concerns about their private messages being accessed without their knowledge or permission. The paper highlights:

  • Views on the importance of encryption: More than three in four people in the EU (77%) consider encryption important for protecting their private online communications. Frequent internet users and people who are more concerned about unauthorised access to their private messages value encryption more highly.
  • Concerns about access to private messages: The majority of respondents (62%) are concerned that their private communications could be accessed by criminals. This is  followed by concerns about access by foreign governments (49%), private companies (47%), or by national governments (42%), intelligence services (42%) and law enforcement authorities (37%).
  • Variation between EU Member States: People’s concerns vary between EU Member States. For example, concern about law enforcement accessing private online communications without people’s knowledge or permission ranges from 11% to 58% depending on the Member State. The paper presents the differences between countries and population groups in more detail.

By providing this evidence, FRA aims to inform ongoing discussions on the topic and support policymaking at both EU and Member State levels, in line with fundamental rights obligations. 

The findings are based on an EU‑wide survey of 26,453 people aged 15 and over, conducted in November 2025. 

They are part of FRA’s wider body of work on access to data and law enforcement with respect to internal security, including the Agency’s ongoing research on the fundamental rights implications of accessing digital data for criminal investigations.