What is Chat Control?
An EU legislative proposal that would require messaging services to scan all user communications for child sexual abuse material (CSAM), raising concerns about end-to-end encryption and mass surveillance.
Chat Control (formally the EU Regulation on Child Sexual Abuse) is a controversial proposal that would mandate automated scanning of private messages, photos, and videos across messaging apps to detect CSAM.
How It Would Work
- Client-side scanning — Software on your device would scan content before or after encryption
- Server-side scanning — Providers would scan unencrypted content on their servers
- Hash matching — Known CSAM hashes compared against uploaded content
- AI detection — Machine learning models to detect new or unknown material
The Encryption Problem
End-to-end encryption means only the sender and recipient can read messages. To scan content, either:
- Break encryption — Remove or weaken E2EE so providers can read messages (defeats the purpose of private messaging)
- Scan before encryption — Client-side scanning on the user's device before messages are sent (still invasive; creates a backdoor)
- Scan after decryption — Only possible if the provider holds the keys (not true E2EE)
Privacy advocates argue that any mandatory scanning creates a surveillance infrastructure that can be expanded beyond its stated purpose.
Related Legislation
- EARN IT Act (US) — Similar push to require scanning; would weaken Section 230 and encryption
- UK Online Safety Act — Already law; may require content scanning with similar implications
- Encryption bans — Several countries have proposed or passed laws requiring access to encrypted content
Status
As of 2026, Chat Control remains under negotiation in the EU. Multiple drafts have been revised. The European Parliament has pushed back on mandatory client-side scanning. The outcome will affect Signal, WhatsApp, iMessage, and other E2EE services used by billions.
Related Terms
Client-Side Scanning
Scanning content on a user's device — before or after encryption — to detect prohibited material, often proposed for child safety but criticized as a backdoor that undermines end-to-end encryption.
EARN IT Act
Proposed US legislation (Eliminating Abusive and Rampant Neglect of Interactive Technologies Act) that would undermine end-to-end encryption by making platforms liable for encrypted content they cannot see.
Encryption Ban
Government efforts to outlaw, weaken, or mandate backdoors in end-to-end encryption — arguing that law enforcement needs access to encrypted communications, while security experts warn that any backdoor weakens security for everyone.
End-to-End Encryption
A method of secure communication where only the communicating users can read the messages. In principle, it prevents potential eavesdroppers – including telecom providers, Internet providers, and even the provider of the communication service – from being able to access the cryptographic keys needed to decrypt the conversation.
Have more questions?
Use our guided flow to get the right next privacy step for Chat Control.
Open Guided Flow