The European Union’s proposal to scan private messages for child sexual abuse material (CSAM) has ignited a fierce debate over web security and privacy. Meredith Whittaker, president of the not-for-profit behind Signal, an end-to-end encrypted (E2EE) messaging app, warns that the plan threatens to undermine encryption globally. The proposal, first presented by the European Commission in May 2022, has faced resistance from Members of the European Parliament, who suggest excluding E2EE apps from scanning. Despite this, the European Council insists on including strongly encrypted platforms. The Council’s latest proposal under the Belgian presidency mandates “technologies for upload moderation” to detect CSAM before transmission. Critics argue that any form of mandated scanning compromises encryption, creating vulnerabilities exploitable by hackers and hostile entities. The revised proposal even requires users’ consent for scanning, limiting functionality for those who refuse. Law enforcement’s push for “technical solutions” to access encrypted data adds to the pressure. The draft text attempts to balance security and privacy, but experts like Whittaker call it a paradox that undermines encryption. The EU’s final stance on the matter remains uncertain as trilogue talks loom.

EU’s Controversial Plan for Scanning Private Messages Sparks Security Fears
The EU’s latest CSAM scanning proposal threatens encryption and global web security.
1–2 minutes










