EU Child Abuse Chat Scanning Bill Risks Breaking Encryption

The European Union is closer than ever to approving its controversial Child Sexual Abuse Regulation (CSAR), also known as Chat Control. The proposal, led by Denmark, would mandate scanning of private messages—including encrypted ones—for child sexual abuse material (CSAM). EU Council members are set to deliver final positions on September 12, marking a decisive moment after three years of failed negotiations. 

The Danish plan requires messaging services to conduct client-side scanning directly on devices before encryption, targeting shared URLs, images, and videos. Government and military accounts are exempt, raising concerns about double standards. 

Opponents, including over 500 cryptographers and researchers, warn that the proposal risks breaking end-to-end encryption, weakening privacy, and creating new security vulnerabilities. Experts argue that once the system exists, it could easily expand to broader surveillance. 

Key points of contention include: 

• Privacy risks: Scanning undermines encryption, potentially exposing all users to surveillance. 

• National security: Agencies in Sweden and the Netherlands warn that encryption backdoors could be exploited by hostile actors. 

• Technical flaws: Experts highlight risks of false positives and circumvention by criminals, making detection unreliable. 

• Political split: 15 EU states, including France, Italy, and Spain, support the proposal, while eight—including Germany and Luxembourg—oppose it. Four countries remain undecided. 

Critics argue that the proposal creates a false sense of security, while simultaneously endangering user privacy and digital resilience. Advocates maintain it is essential to combat online abuse at scale. 

If passed, the CSAR will move to the European Parliament for trilogue negotiations. Observers stress that the outcome may set a precedent for global encryption policy, with privacy advocates warning that CSAM may be a gateway to broader surveillance. 

The debate highlights a fundamental question: Can Europe protect children online without dismantling encryption for everyone? 

 

Source: 

https://www.techradar.com/vpn/vpn-privacy-security/the-eu-has-never-been-closer-to-agreeing-on-the-scanning-of-your-private-chats-but-how-did-we-get-here