The EU still wants to scan your private messages and photos (fightchatcontrol.eu)

by MrBruh 393 comments 1450 points
Read article View on HN

393 comments

[−] kleiba 51d ago
If you're ever unsure about whether a proposed EU regulation may be good or bad, just look at whether Hungary supports it: if so, it's bad; if not, it might be good. Egészségére!
[−] solstice 51d ago
[−] skrebbel 51d ago
I would like to share here that the author of this site made it very easy to call. If you read this and are in the EU, I urge you to try this.

Find a representative you think is at least somewhat likely to change their mind, and call their phone nr listed on the site. I tried one rep and couldn't get through, tried another (their Brussels phone) and I got someone on the line. The site helpfully suggests a call script, which you can take hints from.

I got a staffer on the line, who didn't want to share what my rep was planning to vote and generally wasn't very excited about calling with me, but I imagine that if lots of people call lots of these staffers, things actually do get through to these MEPs.

Please help.

[−] moezd 51d ago
That's the problem with electing too many people with law background to a parliament: They think it's a Model United Nations session and if they can get things their way despite many real world consequences, they celebrate with joy as our governance becomes literally ungovernable.
[−] afh1 51d ago
Where are all those "as an EU citizen" commenters? You are but a subject of an ultra-national government whose sole objective is ever increased control over your life and euros.
[−] latexr 51d ago
As a EU citizen, it pisses me off that the US is (with others outside the EU) trying this hard to lobby to undermine our democracy and freedom of speech.

https://digitalcourage.social/@echo_pbreyer/1162053712243153...

And I’d still take this clusterfuck over the alternative current state of the US. At least this situation we can (and have been) striking down, despite all the naysayers on HN. Here’s to hoping we’re able to do so again!

[−] teekert 51d ago
I'm happy that the Netherlands is still against this. Our currently largest party (D66) was also always pretty strong on privacy. When I contacted them some time back (I think using this initiative), they ensured me that they remained against, but did feel that something must be done (ok fair enough).
[−] drnick1 51d ago

> The "Chat Control" proposal would legalise scanning of all private digital communications, including encrypted messages and photos.

How would this be enforced in practice? In other words, what would prevent E.U. users from using encrypted services outside of the jurisdiction of the E.U., to "illegally" encrypt their hard drives or to run their own private encrypted comms servers?

[−] exceptione 51d ago
I am not oblivious to the intent behind this push, but even if you focus solely on the technicalities the idea falls apart. Even with only client-side verification this will be a big privacy intrusion. I see current AI's flag prompts for the most stupid reasons for using words that might possibly occur in non-safe contexts too. The human experience is just too complex for a machine to understand.

To properly assess something, you need to be bodied in reality, being related to the other human in the same human reality. All the datacenters of the world combined will fail the stated objectives, let alone a stupid phone chip. We should not allow computers to take on the role of policing actors in our human reality, because they even can't perform that role faithfully.

[−] AnonyMD 51d ago
If you consider who is monitoring us, it's obvious that this is for the benefit of those in power.
[−] iamskeole 51d ago
It seems the vote passed [1], meaning the existing Regulation [(EU) 2021/1232] was _extended_ until August 3 2027, with some amendments to the previous text:

- added targeted scanning requirement

- scanning must be “targeted, specified and limited… where there are reasonable grounds of suspicion… identified by a judicial authority”

[1] https://www.europarl.europa.eu/doceo/document/TA-10-2026-007...

[−] smeggysmeg 51d ago
It can fail 100 times and it won't count, and the one time this surveillance legislation passes it will become law. Thanks EU, nice show of democracy.
[−] Vinnl 51d ago
Just a heads up that this is being posted late in the European evening here, so that will affect who's commenting.
[−] CodinM 51d ago
It's really hard to not become a euroskeptic, despite being involved with so many EU related things from my youth to now in which I believed wholeheartedly, but this is just... I know - they just need to win once, we need to win every time.
[−] mnewme 51d ago
Fun fact: the parties that want this are actually those who criticise the EU the most
[−] MrBruh 51d ago
You can directly call your representatives by looking them up here:

https://www.europarl.europa.eu/portal/en

[−] c16 51d ago
Great that MPs are apparently exempt from the scanning. As if there aren’t enough high profile menaces in power.

Either include everyone, or accept it’s an awful idea for security and exempt everyone.

[−] trelliumD 51d ago
DONT forget that this legislation is the result of a Lobby of META
[−] crest 51d ago
Let the damn politicans go first and make all their private messages public. Yes everything from boring I'm stuck in traffic honey over nudes to insider trading and lobbying.
[−] mfru 51d ago
The EU is a horribly intransparent and dubiously democratic institution.

As a normal citizen you have no real possibility to hold MEPs accountable other then writing an angry E-Mail.

In an actually democratic system politicians would be in their position only by mercy of the people and can be voted down from their position anytime if enough people petition for it. (and not just maybe be called back when elections at home plummet)

Politicians should be afraid of the people and not the other way round.

[−] Smar 51d ago
So EU syill wants to harm children.
[−] _rnmp 51d ago
Curious how they plan to handle encrypted attachments — scanning has to happen either before encryption (client-side) or after decryption (server-side). If E2EE is preserved end-to-end, there's literally no point in the pipeline where a third party can scan without the client's cooperation. So either E2EE breaks, or the law is unenforceable by design.
[−] HelloUsername 51d ago
Why's there '?foo=bar' in the URL?
[−] jedisct1 51d ago
The US doesn't even have to ask, people already give AI providers all their data and full control over all their devices.
[−] hsuduebc2 51d ago
Nice website! Sadly, url stays the same across all coutries. I can't send anyone direct link.
[−] SanjayMehta 51d ago
I love this. These are the same people who create think tanks and "international courts" to point fingers at "third world" countries for "authoritarianism," "freedom of speech."

Hypocrisy par supreme

[−] wolvoleo 51d ago
Yeah that didn't take long. Of course they keep pushing it. I knew the big 'win' of the 11th was a bit premature and overcelebrated.

The dark forces behind all this set to gain a lot of profits once it passes :(

[−] retinaros 51d ago
Few days ago we had a guy explaining to us at the top of hn page that we should migrate data to europe. Sometimes I miss the internet of before mass surveillance abd ads everywhere
[−] 21asdffdsa12 51d ago
Do your part- photograph your ass every day, send the pictures to your representative and EU parliament member.. they need to know. Volunteer the knowledge they crave.
[−] quater321 51d ago
The new definition of democracy and freedom is: - censoreship - propaganda - ban of oppositions (anti globalist, conservative parties) - NO privacy
[−] rheir 51d ago
results here: https://portal.assisteu.eu/european_parliament/plenary/votes...

You can find how present MEPs voted

There are 10 votings (not only one), some adopted and some rejected, I am not sure what that means, maybe someone can elaborate.

[−] mastermedo 51d ago
What does this mean for a non-eu citizen communicating with an eu citizen? Is it as simple as using signal/matrix instead of whatsapp/messenger?
[−] jacknews 51d ago
so much for 'democracy'

keep voting until you get the right answer

at least EU are voting I suppose. some governments just go ahead and mass-surveil illegally

[−] spwa4 51d ago
But don't worry, exceptions for ALL officials are built in. And I do mean ALL officials. In this bill, for example, pedophile gym teachers are perfectly safe from getting scanned.

Gym teachers are also the largest group of people convicted for pedophilia. So you can be sure they are keeping their priorities straight. States, and the monopoly telco's are also protected from paying even the tiniest amount of money for companies to do these scans, all costs are entirely offloaded to app developers.

So the priorities are clear:

1) protecting the state from even the tiniest amount of responsibility, even at the cost of children getting abused

2) keeping some 50 foreign states from the same

3) keeping a whole list of organizations safe from inspections

4) keeping the state safe from actually spending any amount of money on these scans

...

n) protecting children

[−] ZetsuBouKyo 51d ago
it's probably best to go with client-side encryption and share keys with friends privately. that pretty much fixes all the privacy issues after the initial registration, but maintaining that extension with all the company and their updates is a bit of a headache.
[−] tithos 50d ago
What do you have to hide except for a couple possible Nudey pics
[−] rdevilla 51d ago
They should just ask the Americans. If you are not a US citizen you have zero rights, and any old creep in Silicon Valley can riffle through your personal information with impunity.

I realize I am just recapitulating the modus operandi of Five Eyes here...

[−] x775 51d ago
I am the creator of Fight Chat Control.

Thank you for sharing. It is unfortunately, once again, needed.

The recent events have been rather dumbfounding. On March 11, the Parliament surprisingly voted to replace blanket mass surveillance with targeted monitoring of suspects following judicial involvement [0]. As Council refused to compromise, the trilogue negotiations were set to fail, thus allowing the Commission's current indiscriminate "Chat Control 1.0" to lapse [1]. This would have been the ideal outcome.

In an unprecedented move, the EPP is attempting to force a repeat vote tomorrow, seeking to overturn the otherwise principled March 11 decision and instead favouring indiscriminate mass surveillance [1, 2]. In an attempt to avoid this, the Greens earlier today tried to remove the repeat vote from the agenda tomorrow, but this was voted down [3].

As such, tomorrow, the Parliament will once again vote on Chat Control. And unlike March 11, multiple groups are split on the vote, including S&D and Renew. The EPP remains unified in its support for Chat Control. If you are a European citizen, I urge you to contact your MEPs by e-mail and, if you have time, by calling. We really are in the final stretch here and every action counts. I have just updated the website to reflect the votes today, allowing a more targeted approach.

Happy to answer any questions.

[0] https://mepwatch.eu/10/vote.html?v=188578

[1] https://www.patrick-breyer.de/en/the-battle-over-chat-contro...

[2] https://www.europarl.europa.eu/doceo/document/OJQ-10-2026-03...

[3] https://www.europarl.europa.eu/doceo/document/PV-10-2026-03-...

[−] weakened_malloc 51d ago
You're doing God's work mate.

It's really surprising to me that this issue keeps coming up time and time again, until I realised that it's non-voted in parties actually trying to pass this stuff!

I didn't realise that the EU parliament simply says yes or no to bills and doesn't actually propose new laws, whilst the EU Commission are appointed and decide on what bills to push through.

[−] SiempreViernes 51d ago
The EP has the right to make amendments to proposed legislation, its not simply a yes no vote.

In fact what is described as "Parliament surprisingly voted to replace blanket mass surveillance with targeted monitoring of suspects following judicial involvement" is exactly the EP voting to amend the Commission proposal on an extension of existing itermim rules with text that explicitly limits the scope.

[−] hermanzegerman 51d ago
The Commission consists of the Member States. So obviously they are also voted-in parties since the government of the Member States is democratically elected
[−] coldtea 51d ago
The first level democracy itself is a farce - coalition governments run by parties the majority doesn't want, MP seat allocations under ridiculous non-representative rules, campaign programs and pre-election promises broken all the time, 4 or 5 years of politicians left unchecked with no in-between recourse like referendums and assessments except to vote someone else next year, and that's without taking into account the mega-business interests sponsoring and controlling them.

Once removed even from that, the E.C. second level democracy is beyond a farce.

[−] weakened_malloc 51d ago
True but it's a step removed. The MEPs are directly voted in whilst the EC are not, they're "voted in" on account of "voted in" people assigning them to the EC.

I mean nobody argues that the FED governor is voted in, right? In reality a lot of people argue that they're unelected and yet making decisions that affect everyone.

[−] supermatt 51d ago
The European Commission represents the interests of the member states, while the European Parliament represent the interests of the citizens. NO LAW CAN PASS without the consent of the citizens directly elected representatives. There is no "pushing through".

If you don't like how you are represented at the commission, then blame your government. It is THEIR representative - not yours.

Also, don't forget that the commission as a whole needs to be approved by a vote at European Parliament - i.e. by the directly elected representatives.

[−] RobertoG 51d ago
No, the European Council is suppose to represent the interest of the member states. The European Commission is suppose to be the executive of the European Union. Translating to the USA system, it would be like saying that the White House is suppose to represent the USA states. No, It's suppose to represent the interest of Europe as an entity.

Any introduction to democracy explains that the power is separated in the executive, the legislative and the judicial.

The European Parliament is suppose to be the legislative body but can't initiate legislation.

The Commission is suppose to be the executive, but, somehow can also initiate legislation and is not elected directly by the citizens. And the council that, I suppose would be the equivalent to a senate, is not directly elected by the citizens.

And we could talk about how all the important decisions are done in the dark, or how, like in this case, when something is not 'correctly' voted, they just keep bringing it back until it pass, or how they have started to 'sanction' people without judicial supervision.

It's time to open the eyes, because this is not going to improve. The EU 'democracy' is a joke.

[−] 3836293648 51d ago
This in standard in europe. Most places don't vote for their PM or President either, they're just the leader of the largest party in parliament and chosen by parliament
[−] markdown 51d ago
As it should be.

It's good that both the US Fed Reserve Governor and EC appointees didn't have win popularity contests to get there.

[−] DeathArrow 51d ago
The commissioners are a few but the people who make the actual bills and policies are clerks and bureaucrats who were never elected neither directly nor indirectly. And while the commissioners do change, the EU bureaucrats never change.
[−] CGamesPlay 51d ago
I am always curious when I see these kinds of movement. It seems abundantly clear that the options on any vote in any legislature for a proposed bill are always “yes” and “ask me later”. So when I see things like Fight Chat Control, it feels like the call is “we must tell our legislators to press the ask later button!”

Why? Why has your approach not been toward passing active legislation that protects these rights going forward? Genuinely curious. I understand that finding and pressing the “don’t ask again” button is always harder, but I don’t understand why “we punted on this decision!” is a celebratory moment.

[−] daoboy 51d ago
Thank you for what you're doing, this is an important fight.

The story is tragically illustrative of the maxim that you can oppose terrible legislation a hundred times but they only have to pass it once.

[−] effisfor 51d ago
Fair play x775, I'm currently moving lots of EU and UK projects away from US-owned and/or sited infrastructure. There is a huge marketing push from the EU cloud providers to display their sovereign wares. Maybe us Europeans need to make them more aware of how futile it is to move to EU companies if there are laws equal-to or more pernicious than the US CLOUD Act? A dozen large EU tech companies will sadly exert more pressure on EU lawmakers than trying to explain to 500 million normal people how a law that looks like it will protect children is a smokescreen and terrible for civil liberties.
[−] Aerroon 51d ago

>let's vote on this proposal

>rejected

>let's vote on it again!

Is it still a democracy if you just keep redoing the vote until you get the outcome you want? The politicians involved in this should be ashamed of themselves.

[−] Palmik 51d ago
Great work! There is maybe some bug. When you click on one of the 4 "opposing" countries (e.g. Czech Republic, Poland), it scrolls down and then shows that majority of the representatives from the country actually support it. Is that intended? Won't that make people from those countries "relax" even though they might have an impact by contacting their represenatives?
[−] peq42 51d ago
I swear to god if the UK gives the world yet MORE surveillance state...
[−] az09mugen 51d ago
Thanks for your work. Just how is it possible for non-EU lobby to make vote a law in EU, and push for it ?
[−] tritiy 51d ago
I've just used it to send email to my representatives (Croatia). Thanks for the effort.
[−] varispeed 51d ago
Why this attempt is not treated as terrorism and authors of the proposals are not arrested?

Chat Controls fulfil the definition of terrorism wholly.

[−] dinoqqq 51d ago
You're a hero
[−] laylower 51d ago
You are a beacon of hope man. Please, please, continue the good fight, we need you.

We keep seeing the establishment resurfacing and imposing this blanket surveillance globally. What's happening in Brazil, the UK, EU, and has already happened in the US with no legislation or via the 5-eyes is scary.

Who are these people pressuring elected politicians and unelected bureaucrats to legislate against their constituents? Who are these lobbyists?

I get that there is a large constituency that wants to control dissidents and the narrative in the name of child abuse - see what's happening in the UK where people get arrested in the thousands for posting comments online.

Abolishing privacy is not the way to protect children. Police work and prosecution is. For reference see the grooming gangs in the UK, the infamous Eps*% case for which everyone is still walking free, and other cases in various EU countries. This is not whataboutism, it's proof that we have not taken the required steps as a western society to combat this. You don't press the nuclear option as your first action.

If it's bot farm meddling that is the true target, then ban bots and get technology to work properly. Creating ID honeypots on poorly protected website operator servers is not the solution.

Call your politicians, call your EU MEPs, call everyone you can. This matters because it's about our future.

[−] mordae 51d ago
Can we start organizing a strike of tech workers already? Pretty please? Just say the word.

Maybe reach out to Signal to implement some kind of one-way channel so you can reach people easily?

We need to put actual pressure on those fascists. Next time they even mention it, we flood the council website with an identical search query, say "Does no mean yes after all?" and if they persist, we strike for couple days.

[−] egorfine 51d ago
Is there any point in fighting it given that they will rename, repackage and resubmit the legislation in mere days if it doesn't pass?

Don't get me wrong: my blood boils reading those legislations, but rationally I don't see a path to victory here.

[−] belter 51d ago
How can people support your work?
[−] derefr 51d ago
So... if we all care so much about shooting down the bad idea, why is nobody proposing opposite legislation: a bill enshrining a right to private communications, such that bills like this one would become impossible to even table?

Is it just that there's no "privacy lobby" interested in getting even one lawyer around to sit down and write it up?

Or is there at least one such bill floating around, but no EU member state has been willing to table it for discussion?

[−] Stagnant 51d ago
Okay so I had to look in to it because the site is not really doing a good job explaining it at all. Turns out[0] that they are voting for the extension of the temporary regulation thats been in effect since 2021 (Regulation (EU) 2021/1232). So this is about the "voluntary scanning of private communications" (which is still bad, but has been in effect for almost 5 years already).

[0]: https://www.europarl.europa.eu/sedcms/documents/PRIORITY_INF...

[−] leugim 51d ago
So they will pass it until is a yes?
[−] elzbardico 51d ago
They never quit. They just waited for something else to dominate the news, so they could fly it under the radar. The war started, so, they felt it was now or never.
[−] foweltschmerz 51d ago
This is the same EU that blocks and hinders innovation in the name of privacy?
[−] dokyun 51d ago
So much for "digital soverignty".
[−] petterroea 51d ago
They only need to win once, while the public has to fight back every time. Incredibly demotivating
[−] baal80spam 51d ago
But of course it's back.
[−] frail_figure 51d ago
Good news, we held out strong!
[−] hkon 51d ago
ofc, they only need to get it approved once. they will try until they succeed
[−] max_ 51d ago
The lack of accountability after what was exposed in the Epstein files illustrates that not one in power actually care about kids.

"Save the kids", is just a ploy to run scams.

[−] hsuduebc2 51d ago
I absolutely don't understand how anyone can support this in the context of rising authoritarianism. Even people in my country which are talking about this phenomena support it. I strongly suspect that they do absolutely know shit about why it's problematic.

I wonder if they would support that every of paper mail would be opened and checked. I strongly doubt that.

[−] pym4n 51d ago
I honestly think these lawmakers have no idea how deep this rabbit hole goes - it's not possible to implement what they are proposing.
[−] WhereIsTheTruth 51d ago
They want to do what US Big Tech already is doing

Y'all are bunch of hypocrites

[−] sayYayToLife 51d ago
Imagine the outrage if this happened in the US instead because it's in Europe there's just a bunch of apologists here.

The longer I live I think US citizens just have the highest standards for both morals and life expectations.

Meanwhile Europe is happy to get anything.

[−] vrganj 51d ago
Framing this as the EU's attempt is antieuropean propaganda.

It is the Conservatives attempt. The EU parliament is the entity that shot it down last time.

[−] littlestymaar 51d ago
Reminder: it's not the “EU”, it's the PPE (the union of conservative European parties), and the national governments.