The EU's 'Chat Control' Is Back From the Dead — and It Wants to Scan Every Message You Send

Some bills refuse to stay dead. The EU’s so-called “Chat Control” is the textbook case. The proposal to automatically scan everyone’s private messages is once again sitting on the negotiating table — and the talks aren’t happening in open parliament. They’re happening behind closed doors.

A quick note of honesty up front: this topic generated almost no community discussion in the last 30 days. So instead of chasing real-time reactions, this piece focuses on what the bill actually is, how it’s structured, and why it keeps rising from the grave.

So What Exactly Is Chat Control

Its formal name is the Child Sexual Abuse Regulation (CSA Regulation). The stated goal is stopping the spread of child sexual abuse material, or CSAM. Nobody can argue against that. And that’s precisely the point.

The problem is the method. The bill would let regulators force messaging providers to scan the messages, photos, and links you send before they ever leave your device. In plain terms: apps like WhatsApp, Signal, and Telegram would have to peek at your messages first and flag anything “suspicious.”

The technology that makes this possible is called client-side scanning. It inspects your content inside your own phone, before it gets encrypted. Think of someone reading your letter over your shoulder right as you’re sealing the envelope. The envelope — the encryption — stays intact. Your privacy is already gone.

Why Critics Call It “The Death of End-to-End Encryption”

The whole pitch of an app like Signal is end-to-end encryption (E2EE): only the sender and recipient can read the message. Not the company, not the carrier, not the government.

Client-side scanning sidesteps that promise without technically breaking it. It doesn’t crack the encryption — it just builds a checkpoint before the encryption happens. That’s why security researchers describe it as a “backdoor that neuters encryption.”

And once a backdoor exists, its uses only expand. Today it’s CSAM. Tomorrow it’s terrorism. Then copyright. Then political dissent. Once a system can technically look inside your messages, what it looks for becomes a political decision, not a technical one. Signal has said repeatedly that if such scanning is mandated by law, it will pull out of the EU market entirely.

The Real Problem Is the Closed Door

The second line of criticism is about process. EU lawmaking has a stage called the trilogue — a closed-door meeting where the Commission, the Council, and the Parliament hammer out the final text among themselves.

The catch is that the substance can shift in that room. A clause that drew fierce public backlash often comes back reworded just enough to survive, hashed out where no one’s watching. Citizens have no real-time way of knowing which version is being negotiated.

This is why Chat Control gets called a “zombie bill.” It’s been voted down and postponed multiple times, yet every time the rotating EU Council presidency changes hands, it reappears in a slightly different costume. Mandatory scanning gets repackaged as “voluntary.” The scope gets narrowed, then quietly widened again later. Same beast, new wardrobe.

In Fairness, the Other Side Has a Case

The people pushing this aren’t villains in their own telling. CSAM distribution is a genuinely horrific crime, and the argument that platforms can’t just sit on their hands is a fair one. Some politicians frame it bluntly: privacy matters, but children’s safety comes first.

The rebuttals, though, are sharp. First, mass scanning produces a flood of false positives. There are real reported cases of a parent’s photo of their own child getting flagged as criminal. Second, actual offenders simply migrate to unregulated channels. The result is a system that surveils only the law-abiding while missing the very people it was built to catch. Even the EU’s own legal advisory body has previously warned that the proposal likely violates fundamental rights.

The Bottom Line

The Chat Control fight isn’t really “child safety vs. privacy.” The real question is sharper than that: for a good cause, are we willing to accept a system that treats every single person as a potential suspect and pre-screens them accordingly?

Surveillance infrastructure, once built, rarely gets dismantled. And how it eventually gets used is decided by whoever holds power next. So which world do you want — one where every conversation gets scanned in the name of safety, or one that tolerates some risk to keep a private space intact?