Digital rights organizations around the world are responding with alarm to Meta’s confirmation that Instagram will remove end-to-end encryption from direct messages by May 8, 2026. The change, announced through quiet updates to the platform’s help documentation, represents what advocates describe as a significant rollback of user privacy on one of the world’s most widely used social media platforms.
Tom Sulston of Digital Rights Watch has been among the most vocal critics of the decision. He questioned why Meta would remove a privacy feature rather than invest in better safety tools that could address online harms without compromising user privacy. He also warned about the commercial incentives that the removal of encryption creates — specifically, the potential for Meta to use private message content for advertising optimization and AI model training.
The feature being removed was limited from the start. Introduced in 2023 following a 2019 commitment from CEO Mark Zuckerberg to cross-platform encryption, it was available only to users who opted in. The majority of Instagram users never activated it. Meta is using this limited uptake as the justification for removal — a line of reasoning that privacy advocates challenge by pointing to the structural design barriers that suppressed adoption.
The Australian eSafety Commissioner’s office issued a statement acknowledging both the value of encryption for user privacy and the responsibility of platforms to prevent harm. The statement reflects the genuine difficulty of balancing competing values in the digital environment — and implicitly recognizes that removing encryption is not the only, or necessarily the best, way to address online harms.
Digital rights groups are calling on governments and regulators to respond to the Instagram decision with enforceable data protection requirements. Voluntary corporate commitments to privacy, they argue, are insufficient safeguards when companies face strong commercial incentives to reverse them. Whether regulatory action follows — and whether it comes in time to prevent similar rollbacks at other platforms — remains to be seen.