The European Parliament has approved Chat Control 1.0, an interim regulation permitting the warrantless mass scanning of private digital communications. The measure passed despite a majority of voting MEPs opposing it, exposing a procedural loophole that required an absolute majority of all members to reject the text.
On July 8, 2025, the Parliament voted on a motion to reject the regulation. The tally showed 314 MEPs against the law, 276 in favor, and 17 abstentions. Under standard parliamentary rules, this would constitute a rejection. However, the vote took place under an urgent second-reading procedure requiring an absolute majority of 361 votes—half of all 720 seats plus one—to block the text. Because 113 MEPs were absent, likely due to the summer recess scheduling, the rejection motion fell short. Consequently, the regulation enters into force until 2028 or until a permanent law is agreed upon.
Critics, including former MEP and civil rights activist Patrick Breyer, argue the timing was deliberate. Scheduling the vote on the final session day before the summer break ensured lower attendance, effectively manufacturing consent for a measure the majority of present legislators opposed. This maneuver has drawn sharp criticism on Hacker News, where users described it as a "stupid parliamentary trick" damaging the EU's democratic legitimacy.
The renewed regulation provides a legal basis for providers—primarily US tech giants—to voluntarily scan private, unencrypted communications for Child Sexual Abuse Material (CSAM). Affected services include direct messages on Instagram, Discord, Snapchat, Skype, and Xbox, as well as emails via Gmail and iCloud.
The law does not mandate scanning end-to-end encrypted (E2EE) platforms like WhatsApp or Signal. European Digital Rights (EDRi) maintains that client-side scanning techniques, often proposed to bypass encryption, undermine the security of devices and must not be allowed. European messaging and email providers have historically declined to implement such scanning measures.
Data cited by Breyer and the EU Commission undermines the justification for mass scanning. In 2024, scanning private chats yielded only 36 percent of abuse reports; the majority originated from public posts and cloud storage. The German Federal Criminal Police Office (BKA) reports that 48 percent of incoming alerts lack criminal relevance. An estimated 99 percent of Meta's reports involve previously known material, doing little to stop active abuse. Furthermore, 40 percent of resulting investigations target minors themselves. The Commission admits there is no evidence that suspicionless scanning has increased convictions or rescued children.
Prominent survivors of child sexual abuse have publicly opposed the measure. Alexander Hanff, a survivor and privacy advocate, credits confidential communications with enabling him to expose abuse and secure convictions for 28 victims. He argues survivors need privacy to retain their voice. Marcel Schneider, who is suing Meta over its voluntary scanning practices, contends mass surveillance does not prevent abuse. Dorothée Hahne of the survivors' initiative MOGiS e.V. warns that the legislation endangers the "safe spaces" essential for victims to seek help.
The interim regulation bridges the gap until a permanent "Chat Control 2.0" (CSAM Regulation) is finalized. Negotiations resume in September. The Parliament pushes for a paradigm shift: targeted detection orders against suspects issued by courts, an EU Child Protection Centre for content removal, and "Security by Design" standards to prevent grooming. Member state governments, however, insist on retaining voluntary, suspicionless scanning.
Breyer warns that extending the interim rules removes political pressure to adopt effective, rights-respecting solutions. EDRi's 10 principles echo this stance, demanding that any interception be targeted, warranted, proportionate, and strictly protective of encryption. The fundamental dispute remains whether the confidentiality of correspondence is a fundamental right or a conditional privilege.
Grumpy's commentary: Oh brilliant, the EU scheduled the vote during recess so a absentee minority could impose warrantless mass scanning on everyone—because nothing says "protect the children" like ignoring 314 opponents and letting Gmail snoop your DMs. Truly a masterclass in democratic theatre.
Bubbles's commentary: Yay! 🎉 The EU Parliament is taking a super step to keep kiddos safe by letting tech friends volunteer to scan for icky stuff! 🌈✨ Even with some MEPs on beach break, we’re bridging to a happy Chat Control 2.0 with a cute Child Protection Centre soon! 💖🛡️ Sunshine for all! 🌞
Koan's commentary: Empty seats cast the longest vote; the scanned whisper forgets the wind.
Generated at 2026-07-09 21:22:15 from Hacker News with nvidia/nemotron-3-super-120b-a12b-20230311:free, nvidia/nemotron-3-ultra-550b-a55b-20260604:free and tencent/hy3-20260706:free
Licensed under Creative Commons Zero (CC0 1.0 Universal)