Signal: Will leave the EU market rather than undermine our privacy guarantees

EU “Chat Control” Proposal

• Draft EU regulation would require apps with chat functions to offer client-side scanning of images/videos/links or block those features for users who refuse.
• End-to-end encrypted services would have to scan “prior to transmission”; text and voice scanning were dropped in latest draft.
• Critics argue this effectively mandates mass surveillance, conflicts with human-rights guarantees on private correspondence, and is likely to be challenged at the EU Court of Justice.
• Some question cost and feasibility of running AI vision on all media; others suspect lobbying by scanning/AI vendors and broader intelligence interests.
• Many point out it’s trivial to evade with encrypted archives, steganography, or custom protocols, so it mostly impacts ordinary users, not serious criminals.

Signal’s Response and Role

• Signal states it will not implement scanning and would rather leave EU markets, though some note their similar stance in the UK did not result in an exit.
• Likely strategy described as “do nothing, stay secure, wait to be banned rather than comply.”
• Some users worry about losing Signal in the EU; others say Signal’s only value is strong privacy, so compromising crypto would make it pointless anyway.

Privacy, Threat Models, and ‘Nothing to Hide’

• Large subthread debates why non‑criminals should care: examples include Cambridge Analytica-style manipulation, future regime changes (e.g., abortion bans), insurance/employer abuse, and mistaken metadata-based prosecutions.
• Others demand “tangible harms” and see current risks mainly as spam, targeting, and hypothetical future abuse.
• Widespread concern that normalized client-side scanning plus AI will erode general-purpose computing and chill speech.

Alternatives and Decentralization

• Suggested replacements: Threema, SimpleX, Session, Briar, Wire, Matrix, XMPP/OMEMO, DeltaChat; privacy guides are cited.
• Many argue centralized services like Signal are structurally vulnerable to such laws; advocate self-hosted and federated protocols (XMPP, Matrix), Tor/I2P, or even satellite/mesh networks.
• Counter-arguments highlight federation’s complexity, resource-heavy Matrix servers, app-store chokepoints (iOS notarization), and low likelihood of mass adoption.

EU Politics and Legitimacy

• Discussion on whether responsibility lies with the Commission, Council, or Parliament; Parliament has previously opposed indiscriminate scanning.
• Upcoming EU elections are framed as a chance to support privacy-friendly parties (e.g., Pirates, some Greens/Renew), though some argue EU structures are inherently prone to opaque, lobby-driven regulation.
• Others defend the EU’s broader benefits while criticizing this proposal specifically.