EU Parliament Approves Chat Control 1.0 Interim Regulation

EU Parliament Approves Chat Control 1.0

The European Parliament has passed an interim regulation, known as "Chat Control 1.0," which permits the suspicionless mass scanning of private communications. This measure allows US tech companies to scan private messages without a warrant or prior suspicion to detect illegal content, specifically child sexual abuse material (CSAM). The regulation remains in effect until 2028 or until a permanent legal framework is established.

Legislative Process and Voting Controversy

Chat Control 1.0 passed despite opposition from a majority of voting Members of the European Parliament (MEPs). The vote results were 314 against, 276 in favor, and 17 abstentions. However, because the motion to reject the regulation required an absolute majority of 361 votes to succeed, the measure passed.

Critics and observers have highlighted several procedural anomalies surrounding the vote:

• Timing: The vote was scheduled for the final day of the parliamentary session before the summer break, resulting in 113 MEPs being absent.
• Voting Thresholds: The use of an emergency procedure forced a second-reading absolute majority requirement for rejection, which effectively allowed the law to pass even though more voting members opposed it than supported it.

Scope of Scanning: What is Affected

Platforms Subject to Scanning

The regulation permits the scanning of private messages on platforms operated by US tech companies, including:

• Direct Messages: Instagram, Discord, Snapchat, Skype, and Xbox.
• Email: Google Gmail and Apple iCloud.

Exemptions and Existing Capabilities

• End-to-End Encryption (E2EE): End-to-end encrypted chats, such as those on WhatsApp, remain exempt from these scans.
• European Providers: European messaging and email services have not implemented these chat control measures.
• Existing Scanning: Public social media posts and files in cloud storage were already subject to scanning regardless of this law. Targeted, court-ordered wiretapping and user reports remain active tools for law enforcement.

Efficacy and Criticism of Mass Scanning

Civil rights activists and survivors of sexual violence argue that suspicionless mass scanning is an ineffective tool for child protection. Data cited by Dr. Patrick Breyer and the EU Commission indicates the following:

• Low Conversion Rate: The German Federal Criminal Police Office (BKA) reports that 48% of incoming alerts are not criminally relevant.
• Lack of Evidence: The EU Commission admits there is no evidence that suspicionless scanning has increased criminal convictions or the number of children rescued.
• High False Positives: Approximately 99% of reports generated by Meta consist of previously known material, which does not stop active abuse.
• Impact on Survivors: Survivors of sexual violence emphasize that privacy is essential for reporting abuse and finding justice.

"As a survivor I relied on confidential communications to tell my story and find justice for 28 schoolboys—myself included—resulting in the conviction of multiple offenders. We survivors need privacy, because without it we lose our voice."

The Path Toward Chat Control 2.0

Negotiations for a permanent regulation (the "CSAM Regulation" or "Chat Control 2.0") are scheduled to resume in September. The European Parliament is advocating for a paradigm shift toward targeted detection orders against specific criminal suspects rather than blanket scanning. Proposed alternatives include:

• Targeted Detection: Mandatory detection orders against actual suspects identified by the judiciary.
• EU Child Protection Centre: A centralized body to remove known abuse material from the public internet.
• Security by Design: Implementing strict security standards for messaging apps to prevent cyber grooming.

However, EU member states continue to insist on maintaining the voluntary, suspicionless scanning approach, leading to a legislative deadlock.