Update: On December 6, 2024, the European Pirate Party reported that the European Council Committee stopped the proposal (yet again) as more governments joined the list of countries against it. We made some edits to the page to reflect this.
The EU proposal to scan all your private communications to halt the spread of child sexual abuse material (CSAM) is back on regulators’ agenda – but keeps being rejected.
What’s been deemed by critics as Chat Control has seen many twists and turns since the European Commission presented the first version of the draft bill in May 2022. The latest development came in October 2024, when a last-minute decision by the Netherlands to abstain from the vote prompted the Hungarian Council Presidency to remove the matter from the planned discussion.
Now, about two months later, the controversial proposal has returned to the topics the EU Council discussed on December 4, 2024. On Friday, December 6, however, the European Council Committee stopped the proposal (yet again) as more governments joined the list of countries against it.
What is the EU CSAM scan bill?
As mentioned, lawmakers have implemented some changes to the EU CSAM bill amid growing criticism from the privacy, tech, and political benches.
Initially, the plan was to require messaging services and email providers to scan all your messages on the lookout for illegal material – no matter if these were encrypted, like WhatsApp or Signal chats, for example, to ensure that communications remain private between the sender and receiver.
Lawmakers suggested employing what’s known as client side-scanning, a technique that experts, including some of the best VPN providers and messaging apps, have long warned against as it cannot be executed without breaking encryption protection. Even the UK halted this requirement under its Online Safety Act until “it’s technically feasible to do so.”
Fast-forward to June 2024, the second version of the EU proposal aims to target shared photos, videos, and URLs instead of text and audio messages upon users’ permission. There’s a caveat, though – you must consent to the shared material being scanned before being encrypted to keep using the functionality.
This wording made privacy experts furious, with Meredith Whittaker, President of the Signal Foundation, labeling this so-called ‘upload moderation’ as a “rhetorical game” instead.
📣Official statement: the new EU chat controls proposal for mass scanning is the same old surveillance with new branding.Whether you call it a backdoor, a front door, or “upload moderation” it undermines encryption & creates significant vulnerabilities pic.twitter.com/3L1hqbBRgqJune 17, 2024
In September, another version was leaked by Politico. Communications providers would be free to decide whether or not to use artificial intelligence to flag images and text chats as suspicious. These companies, however, would be required by law to scan all user chats and report when they found illegal content.
As per the European Pirate Party’s data before the December 6 meeting, the greater majority of countries have already expressed their support for the new proposal. Even nations like France, who previously were among the opposed governments, have now joined the in-favor list.
At that time, only a few EU members remained either undecided (Italy, Portugal, and Finland) or against (Austria, Belgium, Czech Republic, Estonia, Germany, Luxemburg, Netherlands, Poland, and Slovenia).
A day before the voting (December 5, Patrick Breyer from the European Pirate Party reported that “unconfirmed rumors” claimed an unnamed critical government could join the countries backing up the proposal on Friday.
This, however, didn’t happen as Finland voted against it during today’s meeting, despite both Italy and Portugal reportedly passing from undecided to “in favor.”
link