Meta’s removal of end-to-end encryption from Instagram direct messages by May 8, 2026, is a prompt for a broader conversation that the tech industry, its users, and their governments have been avoiding for years. The conversation is about what privacy on commercial social platforms actually means, who is responsible for protecting it, and what happens when commercial interests and privacy values conflict.
The conversation the tech industry needs to have is about the compatibility of advertising-based business models with meaningful privacy commitments. The Instagram case illustrates clearly that these two things are in structural tension. A company that depends on advertising revenue has an inherent incentive to maximize data access. Privacy commitments that constrain that access are always commercially costly — and commercially costly commitments are always vulnerable when circumstances change.
The conversation that users need to have is about the reasonable limits of trust in commercial platforms. The assumption that private messages sent through a free social media platform are genuinely private rests on a commercial arrangement that does not guarantee privacy. Understanding this — and making deliberate choices about what to share where, based on an accurate understanding of platform incentives — is a form of digital literacy that is increasingly essential.
The conversation that governments need to have is about regulatory frameworks that are adequate to the structural dynamics the Instagram case has revealed. Voluntary corporate commitments are insufficient. Notification requirements without enforcement mechanisms are inadequate. Proportionality assessments that take seriously both the safety benefits and the privacy costs of policy changes are essential but absent from most current frameworks.
The conversation that all three parties need to have together is about what kind of digital communication infrastructure serves the public interest — not just the interests of advertising companies, law enforcement agencies, or individual users acting in isolation. This conversation is long overdue, and the Instagram encryption removal is as good a reason as any to finally have it.