EU Council has withdrawn the vote on Chat Control
The EU Council withdrew the vote on Belgium's Chat Control plan due to lack of support. Critics raised privacy concerns over monitoring chat messages and client-side scanning. Uncertainty looms as discussions resume post-summer.
Read original articleThe EU Council has withdrawn the vote on the controversial Chat Control plan proposed by Belgium due to a lack of majority support. The proposal aimed to monitor all chat messages and digital communications, including client-side scanning for end-to-end encrypted services. Critics, including Signal's president Meredith Whittaker, raised concerns about the impact on encryption and privacy. The European Parliament rejected the original proposal but Belgium reintroduced client-side scanning. Privacy advocates like Threema and MEP Patrick Breyer have voiced opposition, while Edward Snowden criticized the proposal as a mass surveillance measure. With the vote withdrawn, the legislative process faces uncertainty, and discussions will resume after the summer under Hungary's Council presidency. The European Parliament remains firm on protecting end-to-end encryption, setting the stage for intense negotiations until the deadline in April 2026. Privacy advocates and digital rights organizations are expected to continue engaging in the debate over digital privacy and surveillance.
Related
EU cancels vote on private chat app law amid encryption concerns
The European Union cancels vote on law targeting child sexual abuse material over encryption concerns. Proposed measures involve scanning images on messaging apps, sparking privacy debates among member states. Negotiations ongoing.
TikTok confirms it offered US Government a 'kill switch'
TikTok offered a "kill switch" to the US government amid data protection concerns. Legal disputes continue as ByteDance faces pressure to sell TikTok's US assets by January to avoid a ban.
Sweden reports Russian jamming against Astra satellites
Sweden reports Russian jamming signals affecting Astra satellites to ITU, disrupting northern European communications. Interference targets SES-operated satellites in Scandinavia, sparking concerns amid broader radio war in Eastern Europe. Flight suspensions and communication challenges ensue.
Microsoft admits no guarantee of sovereignty for UK policing data
Microsoft admits inability to guarantee UK policing data sovereignty on its public cloud, potentially breaching UK data protection laws. Concerns persist despite company's efforts to address issues, impacting all UK government users.
Apple is first company charged with violating EU's DMA rules
Apple is the first company charged under the EU's Digital Markets Act for App Store policies hindering competition. Investigations focus on fees, alternative app stores, and compliance changes. EU aims to prevent anti-competitive practices.
And it will always crash against the financial interests that want online commerce and banking to work. And so it will always fail in the end, because we can't kill our economy in order to catch more criminals.
We will keep repeating this cycle. Around and around the merry go round we go.
It's unlikely we'll see any admission on why exactly the vote was withdrawn, but it's probable that the situation became untenable for the political parties involved, one of which lost massively in the Belgian elections about two weeks ago.
In an short interview in De Tijd [1] with one of the Belgian MEPs pushing this (Hilde Vautmans, OpenVLD, liberal, lost big), and another short line in De Morgen [2] from outgoing Belgian Minister of the Interior who was part of the talks for this new version (Annelies Verlinden, CD&V, Christian democrats), both of them made it appear like they mostly just care about getting it done (because nobody else has succeeded yet). There is a lot of "but think of the children", and zero technical expertise.
This morning, after the press attention, high rank party officials across the spectrum (and from the parties mentioned above) publicly called the proposal dangerous, so it's likely the pressure worked this time.
Next time this can come up for the vote will likely be from Hungary. They are taking over the EU presidency in a few weeks, and have already said this is on the agenda for them. Considering the current political climate there I would assume they are more likely to bring it to a vote, but hopefully that vote is less likely to succeed. Still, there's no time to rest, the proposal isn't dead.
[1] https://www.tijd.be/ondernemen/technologie/fel-privacyprotes...
[2] https://www.demorgen.be/snelnieuws/verlinden-buigt-voor-luid...
https://www.eureporter.co/business/data/mass-surveillance-da...
Similar proposals haven't got this close to passing in any other first world countries.
I'm glad to see that many sane voices (particularly those affected worst by the Nazis) are leading a resistance against such obviously flawed legislation.
¹ https://itif.org/publications/2022/09/19/how-the-eu-is-using...
² https://www.ft.com/content/9edea4f5-5f34-4e17-89cd-f9b9ba698...
³ https://www.politico.eu/article/european-protectionism-trade...
This bill (only temporarily sidelined) would treat every single person as a suspect of child porn crimes. Previously, you'd need substantial cause to put someone under heavy surveillance.
People talked about how that was due to principles of civil liberty, human rights, and freedom. But apparently it was actually just because it wasn't feasible to watch everything everyone says and does all the time. Now that the technology is here to enable it, our "free democracies" can't rush fast enough to put the boot to everyone's neck all the time.
Pretty obviously this is just the first step. CP is a tactical choice of the first step since practically everyone can agree on how horrible it is. (Come to think of it, this is low key exploiting the vulnerability of children -- nice one, government!) Once everything you say or do is sent to the government for review, you can bet it won't be for just that one thing only.
BTW, I think the government policy makers blow past all the problems with false positives that will inevitably occur because, when your goal is control of the population not the prevention of child abuse, that's a feature not a bug. You want everyone nervous and afraid. You want the stories of the lives of innocent people ruined to circulate. That helps keeps everyone cowed.
I hate this Nazification of the EU so much, that I would support my country leaving the EU the same moment this or similar legislation goes through.
Lucky Brits, at least they can vote out the dumbest and most corrupt politicians and let their laws be enacted by their parliament, and not some international body that claims it has supremacy over national legislation.
That does not make me very hopeful.
Such as? Does it have anything to do with what "Chat Control" is about? What does Hungary have anything to do with it?
We must win every time...
This is pure madness.
I have decided I am not going to wait around to be spied upon by the EU so I am going set up my own server and move to FOSS IOS/Android clients since these ones are currently exempted from the draft.
The hardest part will be to convince friends and family to move over though.
Wait so does it mean they will only propose when they have chance to pass? Is it just me or here is something really wrong with this? It has no chance to be rejected and gone for good?
"... The proposal will return to the drawing board, as the European Commission and the European Parliament continue to deliberate on the best way forward."
I am always fascinated by the hubris bureaucrats have.
I really like e2e-encrypted communication. I also think that in the past decades, in general, most policies have erred too far on surveillance and too little on privacy
BUT
I also think that CSAM material on e2ee channels is a real problem.
If we, as the pro-privacy tech community don't come up with solutions, we'll lose the battle, eventually.
There'll come up a case of child exploitation or trafficing, somehow related to encrypted chats, and it'll be so horrific that the public will be swayed to action, and then what are the options? Is there any option besides client-side scanning or the end of e2ee?
Related
EU cancels vote on private chat app law amid encryption concerns
The European Union cancels vote on law targeting child sexual abuse material over encryption concerns. Proposed measures involve scanning images on messaging apps, sparking privacy debates among member states. Negotiations ongoing.
TikTok confirms it offered US Government a 'kill switch'
TikTok offered a "kill switch" to the US government amid data protection concerns. Legal disputes continue as ByteDance faces pressure to sell TikTok's US assets by January to avoid a ban.
Sweden reports Russian jamming against Astra satellites
Sweden reports Russian jamming signals affecting Astra satellites to ITU, disrupting northern European communications. Interference targets SES-operated satellites in Scandinavia, sparking concerns amid broader radio war in Eastern Europe. Flight suspensions and communication challenges ensue.
Microsoft admits no guarantee of sovereignty for UK policing data
Microsoft admits inability to guarantee UK policing data sovereignty on its public cloud, potentially breaching UK data protection laws. Concerns persist despite company's efforts to address issues, impacting all UK government users.
Apple is first company charged with violating EU's DMA rules
Apple is the first company charged under the EU's Digital Markets Act for App Store policies hindering competition. Investigations focus on fees, alternative app stores, and compliance changes. EU aims to prevent anti-competitive practices.