Alarming EU proposal to scan private messages could lead to mass surveillance

A controversial proposal under consideration by the European Union is raising alarms among digital privacy advocates, as it would require encrypted messaging platforms like WhatsApp and Signal to scan private messages for child sexual abuse material (CSAM) using AI-powered technology.

The proposed legislation, referred to as "Chat Control 2.0," would mandate that all images, videos, and links shared via encrypted apps be scanned and matched against a government-maintained database before they are sent—effectively compromising end-to-end encryption and the fundamental privacy it provides.

The Council of the EU, representing the 27 member states, is expected to vote on the legislation on Thursday. If passed, the measure would move to the next stage of EU legislative negotiations, potentially bringing sweeping surveillance powers into law.

While supporters argue the move is necessary to combat the circulation of illegal material and protect children, critics warn the approach is dangerously disproportionate. They argue that the scanning—described as “upload moderation”—is tantamount to placing surveillance tools into the hands of governments and creating vulnerabilities that can be exploited by hackers or authoritarian regimes.

“We can call it a backdoor, a front door, or ‘upload moderation.’ But whatever we call it, each one of these approaches creates a vulnerability,” said Meredith Whittaker, president of Signal. “It removes the protection of unbreakable math and puts in its place a high-value vulnerability.”

Privacy advocates, digital rights groups, and even major tech providers argue that the legislation mirrors the dystopian surveillance state described in George Orwell’s 1984, warning that it sets a dangerous precedent for undermining secure, private communications in the name of security.

As the EU prepares for its vote, the outcome could mark a turning point in the global debate over privacy, encryption, and the limits of state surveillance.