EU Considers Stricter Monitoring of Encrypted Messaging
The European Union is advancing a new legislative framework designed to address child sexual abuse online. This proposal, known by critics as �chat control,� has reignited debate on the balance between privacy and child protection across member states.
Background and Legislative History
The term �chat control� was coined by privacy advocates in response to the European Commission�s 2022 proposal. The framework, officially called the Child Sexual Abuse Regulation (CSAR), would require digital platforms�including encrypted services like WhatsApp, Signal, and Telegram�to scan private messages for illegal content related to child exploitation.
In 2021, a temporary measure (often referred to as Chat Control 1.0) allowed companies to voluntarily report suspected child sexual abuse material (CSAM) to authorities, provided user privacy was preserved. This came after concerns that blanket surveillance of private messages would conflict with the European Union's General Data Protection Regulation (GDPR). The privacy protections were seen as a temporary victory for digital rights advocates.
Renewed Efforts and Current Status
The debate has returned with renewed urgency. Under Belgium�s presidency of the European Council and a recent Danish proposal, a new draft law has been introduced. This version aims to mandate monitoring of encrypted communications, with the regulation potentially coming into force on October 14, 2025. This renewed push�sometimes referred to as Chat Control 2.0�has reopened discussions on whether monitoring private encrypted messages is legally and ethically justified.
Division Among Member States
The EU�s 27 countries remain divided. A bloc of nations�including Sweden, Denmark, Estonia, Latvia, Lithuania, Czech Republic, Slovakia, Hungary, France, Italy, Croatia, Bulgaria, Spain, Portugal, and Malta�express support or neutrality. Another group, such as Ireland, Finland, Germany, Belgium, the Netherlands, Austria, and Romania, remain undecided. Only Poland and Slovenia have voiced opposition to the directive.
Balancing Child Safety and Privacy
Proponents argue the new rules are needed to protect children online, citing the internet�s role in facilitating abuse and crime. However, digital rights advocates warn the measures could undermine fundamental privacy and data protection standards across the EU. They cite the risk of mass surveillance and the potential erosion of digital privacy, even in encrypted communication services.
Some privacy proponents highlight the development of privacy-focused applications, inspired by technologies such as Bitcoin and the Nostr protocol, as possible alternatives to preserve private messaging. Advocates stress the importance of public awareness and desire to protect digital privacy if such alternatives are to remain viable.
Next Steps
The CSAR regulation requires approval from both the European Council and the European Parliament. If adopted, it could set a precedent for monitoring encrypted communications within the European Union, raising significant questions about future digital privacy standards and the balance between security and civil liberties.
Related content
Comments
