The EU wants to scan your WhatsApp chats—and privacy experts are furious (2024)

The EU wants to scan your WhatsApp chats—and privacy experts are furious (1)

Update: On June 20, 2024,the Belgian presidency postponed yet again the voting on the legislation at short notice because it didn't have a sufficient majority. However, the Chat Control proposal remains on the table at the time of writing.

On Thursday, June 20, 2024, EU lawmakers are set to vote on a proposed law that, if it passes, would require tech companies to scan all your private messages on the lookout for child sexual abuse material (CSAM).

What's known as Chat Control has faced strong criticism since it was first proposed in 2023. Last May, the Belgian presidency attempted to find a compromise by putting together an allegedly watered-down proposal.

According to the revised Chat Control law, users must consent to have their shared photos, videos, and URLs scanned if they want to keep using this functionality. The bill also introduces the concept of 'upload moderation' to, they say, avoid breaking encryption as the content is supposed to be scanned before being encrypted.

Make no mistake—tech experts are not buying it. Cryptographers, privacy advocates, and tech companies, including some of the best VPN and messaging app providers, all deemed the new proposal as a dangerous rebranding that will plunge us all into mass surveillance. They are now urging people in Europe to contact their national representative in the EU and pledge to stop the bill from passing into the next legislative stage.

Just "rhetorical games"

"Let’s be very clear, again: mandating mass scanning of private communications fundamentally undermines encryption. Full stop," Meredith Whittaker, President of the Signal Foundation, wrote in a statement on Monday (see tweet below).

Signal has been vocal against what's previously referred to as 'side-scanning' since the beginning. The company said it would leave the UK instead of undermining encryption—while still figuring in the Online Safety law, it has been halted until it's "feasible to do so." Whittaker reiterated such a stance when EU lawmakers began considering Chat Control last year.

Get daily insight, inspiration and deals in your inbox

Sign up for breaking news, reviews, opinion, top tech deals, and more.

Now, as many other experts, Whittaker pointed out how 'upload moderation' is simply a "rhetorical game" as, no matter how and when the scanning is implemented, it can still create a vulnerability for hackers and hostile nation-states to exploit.

She said: "We ask that those playing these word games please stop and recognize what the expert community has repeatedly made clear. Either end-to-end encryption protects everyone and enshrines security and privacy, or it’s broken for everyone."

📣Official statement: the new EU chat controls proposal for mass scanning is the same old surveillance with new branding.Whether you call it a backdoor, a front door, or “upload moderation” it undermines encryption & creates significant vulnerabilities 17, 2024

Many other security and privacy experts have endorsed her statement so far. These include Edward Snowden, the American whistleblower who first shed light on NSA surveillance tactics on citizens.

He tweeted: "EU apparatchiks aim to sneak a terrifying mass surveillance measure into law despite UNIVERSAL public opposition (no thinking person wants this) by INVENTING A NEW WORD for it—'upload moderation'—and hoping no one learns what it means until it's too late. Stop them, Europe!"

The likes of Proton (the Swiss company behind popular Proton Mail and Proton VPN services), Tuta, Element, Mullvad, and Threema have also warned their online community of the risks, urging EU governments to reject indiscriminate mass scanning.

Did you know?

The EU wants to scan your WhatsApp chats—and privacy experts are furious (2)

Chat Control 2.0 isn't the only attempt to give law enforcement more access to EU citizens' data. In yet another anti-encryption crusade, a leaked42-point planputs forward new recommendations to make all the digital devices we use every day legally and technically monitorable at all times by law enforcement bodies. "It would mean total surveillance and that Europe's inhabitants carry state spyware in their pockets," said Jan Jonsson, CEO at Mullvad.

Experts have also expressed harsh criticism against the provision of asking users' permission to scan their communications.

"If people cannot use core communications infrastructure without first 'consenting' to mass surveillance then we must understand this as coercive, not an exercise in meaningful choice," Whittaker told TechRadar, adding that the provision doesn't reflect the way detection orders work in law.

Likewise, Matthew Green, Professor of cryptography at Johns Hopkins University, deemed the proposal "coercion into a mass surveillance regime, with some branding."

He also pointed out that focusing only on shared media rather than entire messages might be just a "temporary climbdown" from the original intention. "Their plan appears to be: get the law in place and then it won’t really matter," he wrote in a tweet.

Rand Hindi, CEO of open-source cryptography company Zama, called on the EU's apparent double standards when it comes to data privacy. "Europe is being such a hypocrite here: on the one hand, they force companies to comply with strict privacy regulations (this is good!), but at the same time they are asking for governments to have TOTAL surveillance capabilities," he wrote.

"What’s happening now with Chat Control is a disaster in the making. It is not a hypothetical scenario, it’s one of the most dangerous proposals ever to make it this far, and we should aggressively fight against it."

What's next?

As we mentioned, lawmakers are expected to vote on Chat Control 2.0 on June 20, after being postponed to a day later than the original date.

According to Patrick Breyer, MEP of the German Pirate Party, Italy, Finland, Czech Republic, Sweden, Slovenia, Estonia, Greece, and Portugal are still undecided about tomorrow's vote. In contrast, Germany, Luxemburg, the Netherlands, Austria, and Poland are "relatively clear that they would not go along."

While opposed at the beginning, France appears more inclined to vote in favor at the moment, at the pact that Signal, WhatsApp, and other platforms using end-to-end encryption will be left out of the scope of the law at first. The risks of scanning, however, still remain for the photos and videos you may share on social media DMs, game chats, and similar.

It is also worth noting that legislatorsplan to exemptstaff of intelligence agencies, police, and the military from the CSAM scanning. Moreover, the European Court of Human Rights deemed attempts tobreak encryption illegal last February.

Now, Breyer urges everyone in Europe to take action before it may be too late. To know more about the steps you can take, I suggest visiting his dedicated page here.

The EU wants to scan your WhatsApp chats—and privacy experts are furious (3)

Chiara Castro

Senior Staff Writer

Chiara is a multimedia journalist committed to covering stories to helppromotethe rights and denounce the abuses of the digital side of life—wherever cybersecurity, markets and politics tangle up.She mainly writes news, interviews and analysis on data privacy, online censorship, digital rights, cybercrime, and security software, with a special focus on VPNs, for TechRadar Pro, TechRadar and Tom’s Guide. Got a story, tip-off or something tech-interesting to say? Reach out

More about cyber security

The Snowflake breach tells us that passwords aren't enough4 ways oversharing on social media puts your privacy at risk


NYT Connections today — hints and answers for Tuesday, June 25 (game #380)
See more latest►

Most Popular
This OLED monitor is powerful enough to charge a MacBook Pro laptop — ViewSonic's 32-inch wonder has 10 ports and delivers up to 140W via USB Type-C and I just can't wait to see its price
Netflix’s Sweet Home season 3 trailer teases an epic final showdown for the apocalyptic horror series
Mercedes F1: AI is going to play a big role in our sport's future
Meta Quest users targeted in Windows app scam — here's what you need to know
Did VPNArea just pull the rug on its customers?
Everything leaving Hulu in July 2024
Microsoft has ditched its Project Natick underwater data center
Netflix’s rumored Beef season 2 eyes up Oscar Isaac and Carey Mulligan for the potential show’s new dueling duo
Los Angeles school board data breach sees data on thousands of students stolen
Netflix could be planning a completely free ad-supported service but there’s a catch
The shift to cloud repatriation: Why organizations are making the change – Part 1
The EU wants to scan your WhatsApp chats—and privacy experts are furious (2024)


Top Articles
Latest Posts
Article information

Author: Van Hayes

Last Updated:

Views: 6339

Rating: 4.6 / 5 (66 voted)

Reviews: 89% of readers found this page helpful

Author information

Name: Van Hayes

Birthday: 1994-06-07

Address: 2004 Kling Rapid, New Destiny, MT 64658-2367

Phone: +512425013758

Job: National Farming Director

Hobby: Reading, Polo, Genealogy, amateur radio, Scouting, Stand-up comedy, Cryptography

Introduction: My name is Van Hayes, I am a thankful, friendly, smiling, calm, powerful, fine, enthusiastic person who loves writing and wants to share my knowledge and understanding with you.