Austria's lower house of parliament has approved a law allowing security forces to monitor encrypted messaging services like WhatsApp, Signal, and Messenger under limited circumstances, primarily targeting terrorism and serious threats.

The legislation, scheduled for implementation by 2027, aims to fill a legal gap by providing domestic authorities with the tools to monitor digital communications, which they previously relied on foreign countries to do.

Monitoring permissions will be limited to around 30 cases annually, each requiring approval from a three-judge panel, with strict oversight and a three-month review period that can be extended.

Interior Minister Gerhard Karner emphasized that the law is necessary for national security and is not driven by ideological motives, citing the need to prevent terrorist attacks.

The legislation is designed to enhance security efforts by allowing targeted surveillance of encrypted messages, with authorities stressing that measures will be used only in severe cases.

Opposition parties, including the Greens, FPÖ, and some NEOS deputies, have criticized the bill, raising concerns about potential privacy infringements, excessive spying, and technical feasibility issues.

Critics warn that the law could lead to unwarranted surveillance and infringe on citizens' rights, with some opposition members suggesting they may challenge it in the Constitutional Court.

Monitoring will be limited to three months initially, with possible extensions, and will require multiple levels of legal approval to ensure oversight.

The legislation aims to provide law enforcement with legal tools to monitor high-risk suspects' digital communications, addressing a previous lack of domestic surveillance capabilities.

Austria has relied on foreign surveillance for monitoring messaging services, which has contributed to thwarting threats such as a planned attack on a Taylor Swift concert in Vienna.

The bill was partly introduced in response to that thwarted terrorist plot, highlighting the need for domestic surveillance capabilities to prevent similar threats.

Once passed, the law will initiate a tender process for surveillance technology, with full implementation expected in 2027.

The government insists the legislation is purely for security reasons, aiming to level the playing field for domestic police and intelligence agencies.