EU Council Accelerates "Chat Control" via Legislative Shortcut

The battle over the privacy of digital communications within the European Union is escalating rapidly as the summer recess approaches. While negotiations regarding Chat Control 2.0—which would mandate the suspicionless scanning of encrypted messages—have hit a wall due to fierce opposition in the EU Parliament, the Council of Ministers is employing a strategic legal maneuver to bypass this deadlock.

The Strategy: Reactivating an Expired Norm

The member states are attempting to revive a transitional regulation that permitted technology companies to voluntarily monitor messages. This specific regulation expired on April 3. To avoid a legal vacuum, the Council adopted a position on Thursday via a written procedure to implement a "new" regulation.

Understanding the Legal Landscape

Since late 2020, communication services that are not tied to a phone number (such as VoIP, webmail, and messenger apps) have been governed by the European E-Privacy Directive.

This directive safeguards the fundamental right to the confidentiality of communications, explicitly forbidding the unauthorized interception or analysis of traffic and content data.

To balance this with safety, a temporary exemption was introduced in 2021, known as Chat Control 1.0. This allowed providers to use AI and hash matching to voluntarily identify known child abuse material or grooming patterns.

The "Legal Trick" and the Council's Logic

Because a regulation that has already expired cannot be formally "extended," the EU governments are using a tactical workaround: they have proposed a legislative piece that is identical in substance but different in form.

Why the Council insists on this:

• Child Protection: They argue voluntary detection is a "vital tool" for:
  • Early identification of endangered children.
  • Rescuing victims from active abuse.
  • Stopping the viral spread of illegal imagery.
• Law Enforcement: It supports online policing, noting that reports are still being filed despite the legal expiration.
• Uniformity: It prevents a fragmented landscape where individual nations create their own unilateral rules.

Tactical Timing and Democratic Concerns

Critics argue that this approach is a calculated move to surprise the European Parliament and evade democratic oversight. The timeline is particularly aggressive:

• Adopt position via written procedure (Thursday).
• Place draft on Parliament's agenda (Tuesday).
• Push for a vote on the final session day before summer break.

The "Insurmountable" Hurdle

The procedure is already in its 2nd reading. At this stage, the Council's position can only be altered or blocked if an absolute majority of all representatives vote against it. Mathematically, the requirement is:

$\text{Required Votes} > \frac{\text{Total MEPs}}{2}$

In practice, achieving this threshold is considered nearly impossible just as many MEPs are departing for their holidays.

Privacy Implications and Long-term Outlook

While the Council claims scans will be limited to what is "absolutely necessary" and denies any intent for indiscriminate surveillance, the impact on user privacy remains profound.

Data Retention Policy: The regulation mandates that any processed traffic or content data must be irrevocably deleted within a maximum of twelve months after detection, unless a specific, concrete suspicion is confirmed.

Ultimately, this "quick fix" means that a permanent, comprehensive legal framework for preventing abuse is drifting further away.

---

Related Updates:

• EU Parliament's temporary defiance of chat control.
• UK's proposal to scan children's phones for nudity.
• German data protection advocates calling for a total end to chat control.