How Can Technologists Improve Public Policy?

TL;DR

Public policy involving digital systems must be informed by people who understand how those systems actually work. Public-interest technologists can connect technical expertise with social justice, the common good, and public benefit, helping lawmakers evaluate encryption, surveillance, supply chains, infrastructure, and corporate power while recognizing the real security tradeoffs behind each policy choice.

Transcript

Please welcome Bruce Schneier. Let's start by talking about, uh, going dark. So this is basically a twenty-five-year-old discussion on access to encrypted conversations. Nineteen ninety-three we had the Clipper chip. In this decade we had the iPhone and the access to that. Uh, current demands to eavesdrop on encrypted chat. There's a new Australian... Read More

Key Insights

• Public policy and technology are deeply intertwined because digital systems now shape communications, critical infrastructure, connected devices, consumer affairs, transportation, medical devices, equality, liberty, democracy, and national security. Treating the internet as a separate policy domain no longer reflects its role throughout society.
• The encryption debate involves competing security benefits rather than a simple choice between security and insecurity. Law enforcement can benefit when data remains accessible for investigations, while society also benefits when data is protected from every attacker, including parties that could exploit intentionally weakened security.
• Technology often creates de facto policy because corporations operate systems that can control speech, censorship, personal freedom, and access regardless of what formal laws say. As these systems spread through daily life, private technical choices increasingly determine public outcomes and social organization.
• Policymakers need enough technical literacy to ask informed questions, understand the answers, identify misleading technical arguments, hire appropriate staff, and accept expertise. They do not need mastery of every technology, just as legislators are not expected to become experts in every other complex field.
• Public-interest technologists are technology practitioners who apply their expertise to social justice, the common good, public benefits, or the broader public interest. Their work can involve shaping technology policy, building beneficial technical projects, or serving as traditional technologists inside public-benefit organizations.
• Public-interest technologists can strengthen policy discussions by working on congressional staffs, in federal agencies, at nongovernmental organizations, in academia, inside companies, and as part of the press. Their presence helps connect technical realities with institutional decisions that affect society.
• Supply chain security depends on far more than the home country of a technology company. Meaningful analysis must consider where chips are manufactured, where software is written, who contributes to development, and whether distribution, updates, applications, and shipping mechanisms can be trusted.
• Internet security has become overall security because internet-connected technologies support increasingly sensitive communications and essential systems. Policy will fail when its underlying technical assumptions are wrong, particularly in debates about encryption, corporate surveillance, software vulnerabilities, infrastructure, and globally distributed supply chains.

Questions & Answers

Q: What is a public-interest technologist?

A public-interest technologist is a practitioner who combines technological expertise with a focus on social justice, the common good, or public benefit. The term covers people who shape technology policy, develop technical projects for public purposes, or perform traditional technology work within organizations that serve a public benefit. It is an umbrella for several roles rather than one narrowly defined profession.

Q: Why should technologists participate in public policy?

Technologists should participate because digital systems now influence nearly every major area of society, including communications, infrastructure, consumer affairs, transportation, medical devices, equality, liberty, democracy, and national security. Without informed technical participation, policymakers may rely on fear, rhetoric, political preferences, or pseudo-technical claims, producing rules based on incorrect assumptions about how systems work and what consequences proposed interventions could create.

Q: How much technology knowledge do policymakers need?

Policymakers do not need to become professional technologists or experts in every system they regulate. They need enough knowledge to ask meaningful questions, learn from technically accurate answers, detect misleading claims, hire relevant staff, and accept credible expertise. Having some actual technologists in policymaking roles would also help bridge the persistent divide between technical practitioners and the institutions responsible for public decisions.

Q: What is the central security tradeoff in encryption policy?

Encryption policy weighs two genuine security benefits. Keeping data accessible can help law enforcement conduct forensic investigations, but the same accessibility can expose information to other parties. Keeping data secure from all attackers protects sensitive communications, but it can also prevent law enforcement access. Society must decide which benefits matter more and under what conditions, because law enforcement agencies alone cannot settle that broader question.

Q: Why is the phrase going dark criticized in encryption debates?

The phrase going dark is criticized because it frames encrypted communications as an area becoming completely unavailable to law enforcement and is designed to frighten the public. That framing narrows a broader policy debate involving consumer acceptance, international use, corporate surveillance, investigative benefits, and the risks of weakening security. A technologically informed discussion must evaluate all these consequences instead of focusing only on forensic access.

Q: How does technology function as de facto public policy?

Technology functions as de facto policy when the design and operation of private systems determine what people can say, access, or do before laws address those choices. Corporations can impose practical rules concerning speech, censorship, personal freedom, and participation through their platforms. Because digital services are embedded throughout society, their technical and commercial decisions can become more influential than formal legal requirements.

Q: Why is technology supply chain security so difficult?

Supply chain security is difficult because a product may depend on chips made in one place, software written across many places, globally distributed programmers, application stores, update systems, distribution channels, and shipping processes. Every stage can introduce vulnerabilities or backdoors. The problem therefore cannot be reduced to a company's home country, since secure operation requires trusting many participants and mechanisms that may be hard to verify.

Q: Where can public-interest technologists contribute?

Public-interest technologists can contribute on congressional staffs, inside federal agencies, at nongovernmental organizations, in academia, within companies, and through the press. They may advise policy debates, evaluate technical claims, build projects with public benefits, or bring a public-interest perspective to conventional technology work. Their value comes from connecting practical technical understanding with decisions about social organization, security, fairness, and the common good.

Summary & Key Takeaways

• Technology and public policy are now deeply intertwined because the internet supports communications, critical infrastructure, connected devices, automation, artificial intelligence, robotics, and other systems with social consequences. Technology frequently creates de facto rules concerning speech, censorship, freedom, fairness, liberty, power, democracy, discrimination, and national security before formal law can respond.

• Policymakers do not need to become professional technologists, but they need enough technical understanding to ask useful questions, assess answers, recognize misleading claims, hire qualified staff, and accept relevant expertise. Technologists must also enter policy institutions so debates are shaped by accurate knowledge rather than fear, political convenience, or technically uninformed rhetoric.

• Public-interest technologists combine technical expertise with a commitment to social justice, the common good, or public benefit. They can contribute through legislative staffs, government agencies, nongovernmental organizations, academia, companies, and journalism. Their participation is especially important for complex issues such as encryption access and supply chain security, where simple policy narratives obscure difficult tradeoffs.