I work as a web developer , and I really don ' t understand how this law is supposed to be abided by or how the government can even gather any information for these bodies . I ' m not a server guy , I just write the code that makes the website work . But my understanding is that if you use TLS formerly known as SSL and you have with the little padlock in the corner of your browser , that means your web traffic is secure . Hence the s on the end of It encrypts your connection with practically unbreakable encryption so that nobody can intercept or sniff your web traffic and steal things like payment details , if they do get their hands on it then the data is meaningless garbage without the proper encryption key . That includes ISPs or anyone else that your request passes through before it reaches the other end , which is a webserver that could be running anywhere in the world . In order to bypass TLS , the government would have to have access either to your own device , or to the remote webserver when your request lands . Can someone more versed in the ways of http or internet infrastructure correct me on this if my understanding is wrong ?