EU Revives “Chat Control”: Private Messages Under Scrutiny

The European Union’s controversial proposal known as “Chat Control” has returned to the spotlight. According to a leaked memo, the European Parliament is working toward a compromise that would introduce mandatory scanning of digital content linked to child sexual abuse material (CSAM).

A Long-Running Debate

First introduced in May 2022, the proposal was designed to curb the spread of CSAM by scanning users’ communications, including encrypted messages. From the outset, however, it triggered a wave of criticism over the potential risks to privacy and digital security.

The original draft required indiscriminate scanning of all private messages, sparking immediate backlash. The European Court of Human Rights intervened, ruling against any measure that would weaken end-to-end encryption a technology widely seen as essential for protecting secure communications.

In June 2024, Belgium introduced a more “moderate” version, focused only on photos, videos, and shared URLs, and only with user consent. Then, in February 2025, Poland suggested a voluntary scanning system, framed as a preventive measure.

Denmark’s Radical Push

With the start of its EU Council Presidency, Denmark has revived a version many call the most radical yet. It proposes mandatory mass scanning of private communications, using client-side scanning embedded directly into messaging apps.

Patrick Breyer, a former Member of the European Parliament for the German Pirate Party, described it as “an unprecedented attack on secure encryption”.He also pointed out the controversial exemption of government and military accounts, raising concerns over asymmetric and unreliable surveillance.

Divided Member States

The leaked memo indicates that the EU Council’s own legal service still believes the proposal violates fundamental rights. Yet, despite these concerns, several countries that previously opposed Chat Control now appear more open to compromise.

Support has come from Italy, Spain, and Hungary, while France has stated it could “substantially support” the proposal. Meanwhile, Belgium, Estonia, Finland, Germany, Greece, Slovenia, Luxembourg, and Romania remain undecided, pending internal parliamentary reviews. Their final positions must be submitted by September 12, ahead of the October 14 Council meeting, where a final decision is expected.

Part of a Larger Strategy

The Chat Control debate also ties into a broader European agenda. At the end of June, the European Commission released details of its ProtectEU strategy, which aims to give law enforcement the ability to decrypt private data by 2030.

Supporters see this as a necessary step to protect children and enhance security. Critics, however, warn that it could usher in a dangerous era of mass surveillance, eroding trust in encrypted communications that safeguard users’ freedom and safety today.

In short, the fate of “Chat Control” is far from settled but its outcome could redefine the future of digital privacy across Europe.