Europe revives law allowing big tech to scan for CSAM
The European Parliament has revived a law allowing big tech companies like Google, Microsoft, and Meta to scan users' messages to detect child sexual abuse material (CSAM). This move, driven by a procedural vote and concerns about child protection, has sparked significant privacy concerns and criticism that the measure represents an overreach of parliamentary authority and a potential erosion of privacy in Europe. The law, dubbed ‘Chat Control 2.0’, could extend scanning to even encrypted communications, despite previous rejections and ongoing debate.
The European Parliament has voted to reinstate a law permitting big tech companies, including Google, Microsoft, and Meta, to scan users’ messages in search of child sexual abuse material (CSAM). This decision followed a unique legislative procedure requiring an absolute majority vote to pass, despite more present members opposing the measure than supported it. The law, which expired in April, was revived just before the summer recess.
Big tech companies continued to conduct these scans even after the law lapsed, prompting European officials to caution against doing so without legal protection. The revived ‘Chat Control 2.0’ law could potentially extend scanning practices to include conversations and hosted content, even within end-to-end encrypted communications, a point of contention for privacy advocates.
Lawmakers have been attempting to establish a permanent framework since November 2023, but progress has been slow. Law enforcement officials, including Catherine De Bolle from Europol, have strongly advocated for the continued ability of service providers to scan and report suspected CSAM. However, critics, such as Simeon de Brouwer from Europe’s Center for Democracy and Technology, argue that the measure represents an unacceptable intrusion on privacy, lacking sufficient oversight and legal basis.
The procedural vote and the potential expansion of scanning practices highlight a larger debate about the balance between child protection and digital privacy within the European Union.