The Claim
“Lied when claiming that the USA government cannot view sensitive COVIDSafe data, even though the American encryption back-door laws that allow the US government to force Amazon to hand over the data are the exact same laws which inspired the Australian government's recent encryption back-door legislation.”
Original Sources Provided
✅ FACTUAL VERIFICATION
Government Claims About US Access
The Australian government, through Minister for Government Services Stuart Robert, made statements that provided assurances about US access to COVIDSafe data. According to a ZDNet report from May 2020, a spokesperson for Minister Robert stated: "Uploaded contact information will be stored in Australia in a highly secure information storage system and protected by additional laws to restrict access to health professionals only" [1].
The government also claimed that under law, "it is a criminal offence to transfer data to any country other than Australia, with a penalty of imprisonment for five years and/or 300 penalty units -- AU$63,000" [1]. The stated basis for this protection was a determination through the Biosecurity Act and specific legislation [1].
Civil Liberties Groups' Challenge to These Claims
Civil liberties experts directly challenged these government guarantees. During Parliamentary Joint Committee on Intelligence and Security (PJCIS) hearings, representatives from the International Civil Liberties and Technology Coalition testified that "the Australian government cannot guarantee United States authorities will not have access to data held by the COVIDSafe coronavirus contact tracing app" [2].
Lucie Krahulcova from the International Civil Liberties and Technology Coalition stated: "One of the things the government has sought to do is to ensure individuals that their data won't be shared by Amazon with US entities and that data won't leave … it's not something that Australia can guarantee" [1]. She further explained: "Amazon is still an entity, it's a US-based entity, and when we get into a place where governments put provisions like this into legislation, there's simply no way unless there's a very expensive diplomatic undertaking and extreme carve-outs are sought, there's just no way to guarantee that" [1].
Legal Mechanisms for US Access
The claim references "American encryption back-door laws." The relevant US law is the Clarifying Lawful Overseas Use of Data Act (CLOUD Act) [1]. Under the CLOUD Act, US service providers can be compelled to disclose data to foreign governments pursuant to executive agreements [1].
AWS (Amazon Web Services), which hosted COVIDSafe data, is a US-based entity [2]. Civil liberties experts argued that AWS, as a US company, would be subject to US legal demands under the CLOUD Act [1].
The International Production Orders Bill
Australia's response to enable access to US data was through the Telecommunications Legislation Amendment (International Production Orders) Bill 2020 (IPO Bill), which was designed to create a framework for Australian agencies to gain access to stored telecommunications data from US providers [1]. The Bill was explicitly a precondition "for Australia to obtain a proposed bilateral agreement with the United States in order to implement the US CLOUD Act" [1].
Chronology of Encryption Laws
The Assistance and Access Act 2018 (also known as Australia's encryption backdoor law) was passed by the Australian government in 2018, which gave the government authority to compel technology companies to assist in accessing encrypted communications [3]. This occurred prior to the CLOUD Act discussions in 2020.
However, the claim's assertion that the CLOUD Act "inspired" the Assistance and Access Act cannot be verified. The timeline shows Australia's Assistance and Access Act (2018) predated the negotiations around CLOUD Act implementation in Australia (2020). The Assistance and Access Act was influenced by law enforcement concerns about end-to-end encryption, not by the CLOUD Act specifically [3].
The relationship between the two laws is more accurately described as: both represent similar governmental approaches to compelling access to encrypted/protected data, but the causality claimed in the assertion (that CLOUD Act "inspired" the Australian law) does not align with the chronology.
Missing Context
Australia's Efforts to Provide Assurances
The government did take legislative steps to restrict access. The claim ignores that:
- Australia enacted specific legislation to restrict COVIDSafe data to Australia only, with criminal penalties for breaches [1]
- The data was stored within Australia on AWS's Australian infrastructure [1]
- The government created legal restrictions limiting access to health professionals [1]
The Technical Reality vs. Legal Framework
The civil liberties experts' objection was not that US government could definitely access the data, but rather that domestic legislation alone cannot prevent a US company from complying with US legal demands [1]. This reflects the tension between domestic law and international jurisdictional claims, not a definitive conclusion that access occurred.
No Evidence of Actual US Access
The claim does not cite evidence that US authorities actually accessed COVIDSafe data. The parliamentary concerns were about legal mechanisms through which access could occur, not documented instances of access [1].
Source Credibility Assessment
The original source provided (ZDNet article from May 2020) is a credible technology journalism outlet with a history of accuracy on policy and cybersecurity issues. The article accurately reports testimony from civil liberties experts and paraphrases government assurances.
However, the article itself is reporting a dispute about interpretations of law, not presenting settled fact. The civil liberties groups' position (that guarantees cannot be given) is one interpretation; the government's position (that domestic law would prevent transfer) is another [1].
Labor Comparison
Did Labor government face similar encryption security debates?
Labor had previously overseen encryption policy discussions. Both the Coalition and Labor governments have dealt with encryption-related security concerns and have sought to balance security and privacy [4]. The Assistance and Access Act 2018 was passed under Coalition government and was not a Labor initiative, though Labor governments have also supported law enforcement access capabilities in other contexts.
The core issue—tension between government security objectives and privacy protections—is not unique to Coalition policy.
Balanced Perspective
The Government's Position
The government was attempting to balance public health (rapid deployment of contact tracing) with privacy protections. They implemented:
- Domestic legal restrictions on data access and transfer [1]
- Criminal penalties for unauthorized data transfer [1]
- Specific legislative framework limiting use to health authorities [1]
These steps demonstrate genuine effort to restrict access, even if civil liberties experts questioned whether domestic law alone could provide absolute guarantees against US legal demands.
The Civil Liberties Concern
The experts' objection reflects legitimate concerns about jurisdictional conflicts: Australian legislation cannot override US legal processes that may compel US companies to disclose data [1]. This is a structural problem in international data governance, not necessarily evidence of government deception.
The Key Factual Dispute
The government's guarantee was implicitly: "Our domestic law prevents transfer." The civil liberties position was: "Domestic law cannot guarantee anything against US legal demands." These are different claims. The government was not necessarily lying about intent; they may have been overconfident about domestic law's enforceability against US jurisdiction.
Actual Outcome
COVIDSafe was ultimately decommissioned in August 2022 after proving largely ineffective (identifying only 2 cases despite costing $21 million) [5], so the data access concerns became moot.
PARTIALLY TRUE
5.0
out of 10
The government did make assurances about US access that civil liberties experts disputed [1], and this dispute was legitimate [1]. The experts were correct that domestic legislation alone cannot guarantee protection against US legal demands under the CLOUD Act [1].
However, the claim contains a significant factual error: the CLOUD Act did not "inspire" the Australian Assistance and Access Act. Australia passed the Assistance and Access Act in 2018, while CLOUD Act discussions in Australia occurred in 2020 [1]. The laws are similar in principle (compelling access to communications data), but the causal relationship claimed in the assertion is reversed or non-existent.
The claim that the government "lied" requires showing they knowingly made false statements. The government's assurances reflected domestic legal restrictions they believed would be effective, even if experts correctly identified limitations in their enforceability. This is different from deliberate falsehood—it represents overconfidence in the reach of domestic law.
Final Score
5.0
OUT OF 10
PARTIALLY TRUE
The government did make assurances about US access that civil liberties experts disputed [1], and this dispute was legitimate [1]. The experts were correct that domestic legislation alone cannot guarantee protection against US legal demands under the CLOUD Act [1].
However, the claim contains a significant factual error: the CLOUD Act did not "inspire" the Australian Assistance and Access Act. Australia passed the Assistance and Access Act in 2018, while CLOUD Act discussions in Australia occurred in 2020 [1]. The laws are similar in principle (compelling access to communications data), but the causal relationship claimed in the assertion is reversed or non-existent.
The claim that the government "lied" requires showing they knowingly made false statements. The government's assurances reflected domestic legal restrictions they believed would be effective, even if experts correctly identified limitations in their enforceability. This is different from deliberate falsehood—it represents overconfidence in the reach of domestic law.
📚 SOURCES & CITATIONS (5)
-
1
zdnet.com
During a hearing on Australia's pending International Production Orders Bill, representatives from the International Civil Liberties and Technology Coalition said the government cannot guarantee that Amazon will not share data with United States entities.
ZDNET -
2
abc.net.au
Global tech giant Amazon may not be able to protect Australian Government data including COVIDSafe app data from US subpoenas, say legal experts and crossbenchers.
Abc Net -
3
fee.org
If firms don't have the power to intercept encrypted data for authorities, they will be forced to create tools to allow law enforcement or government to have access to their users’ data.
Foundation for Economic Education -
4
businessthink.unsw.edu.au
There is a discrepancy between individuals’ intentions to protect their privacy to how they behave, shows UNSW Business School research
Businessthink Unsw Edu -
5
abc.net.au
The COVIDSafe app cost $21 million, ran for more than two years, and only identified two cases. Here's what went wrong.
Abc Net
Rating Scale Methodology
1-3: FALSE
Factually incorrect or malicious fabrication.
4-6: PARTIAL
Some truth but context is missing or skewed.
7-9: MOSTLY TRUE
Minor technicalities or phrasing issues.
10: ACCURATE
Perfectly verified and contextually fair.
Methodology: Ratings are determined through cross-referencing official government records, independent fact-checking organizations, and primary source documents.