EU now one step away from reviving private message scanning rules

Original Article ↗ Hacker News Discussion ↗

Scope of the Proposal (Chat Control 1.0 vs 2.0)

  • Commenters distinguish between:
    • Chat Control 1.0: allows providers to scan non‑E2EE messages for CSAM and exempts this from data‑protection restrictions. Many note big platforms already scan for malware/phishing, so this feels incremental but still concerning.
    • Chat Control 2.0: would mandate scanning and effectively ban or weaken end‑to‑end encryption; widely seen as the truly dangerous step.
  • Some argue branding both as “Chat Control” is confusing and politically harmful, others say the name effectively signals the threat to civil liberties.

Privacy, Government Power, and GDPR Tension

  • Many see an inherent contradiction: the EU promotes GDPR and data protection while simultaneously expanding state and law‑enforcement access to private communications.
  • One common interpretation: EU policy is consistent if you assume “data for public safety is acceptable; data for corporate profit is not.”
  • Others argue the real pattern is increasing state control over citizens and companies, with GDPR also functioning as a regulatory moat against smaller players.

Child Protection Justification and Its Critique

  • Supporters (or those sympathetic) argue existing tools are “inadequate for 2026,” and they don’t want abusers to enjoy strong privacy.
  • Opponents counter that:
    • Law enforcement already has warrant‑based mechanisms and should be funded better instead of mandating mass scanning.
    • “Think of the children” is seen as a powerful emotional lever that overrides rational cost/benefit analysis and can be repurposed later for other goals (e.g., political speech control).
    • Some note lenient sentencing and under‑enforcement against known abusers, suggesting political focus is misdirected.

Effectiveness, False Positives, and Abuse Potential

  • Concerns about high false‑positive rates (figures like 50–80% mentioned) and overloading police with noise.
  • Fears that scanning infrastructure could later be turned toward hate speech, dissent, or targeting disfavored groups.
  • Some argue such systems historically expand from voluntary to mandatory (“may” → “must”).

Circumvention and Technical Responses

  • Several note that open protocols, self‑hosted XMPP with OMEMO, and out‑of‑band key exchange can preserve private E2EE, though future laws might criminalize unscannable communication.
  • There is skepticism that authorities can ever fully suppress private cryptography, but concern about criminal penalties and locked‑down platforms (Android/iOS‑style).

Political Dynamics and Resistance

  • Commenters cite ongoing civil‑society and political campaigns against Chat Control and say this resistance is why 2.0 has stalled.
  • Some predict repeated “Terminator legislation” cycles: surveillance proposals return until one passes; opponents will likewise keep trying to roll them back.