\n<\/p>\n
A key body of European Union lawmakers remains stalled over a controversial legislative proposal that could see millions of users of messaging apps forced to agree to their photo and video uploads being scanned by AI to detect child sexual abuse material (CSAM). <\/p>\n
Critics of the plan include tech industry messaging giants like WhatsApp to privacy-focused players like Signal and Proton; legal, security and data protection experts; as well as civil society and digital rights groups; and<\/em> a majority of lawmakers from across the political spectrum in the European Parliament. They warn that the proposal will break encryption, arguing it poses an existential threat to the bloc\u2019s democratic freedoms and fundamental rights like privacy.<\/p>\n Opponents also contend the EU plan will fail at its claimed aim of protecting children, suggesting law enforcement will instead be swamped by millions of false positives<\/a> as everyday app users\u2019 messages are fed through flawed AI-based CSAM detection systems.<\/p>\n On Thursday, a meeting of ambassadors representing the bloc\u2019s 27 Member States\u2019 governments had been expected to reach a position on the file to open negotiations with the European Parliament after the Belgian presidency put the item on an agenda for Thursday\u2019s meeting. However a spokesperson for Belgian\u2019s permanent representative to the EU confirmed to TechCrunch the item was dropped after it became clear governments were still too divided to achieve a qualified majority on a negotiating mandate.<\/p>\n \u201cWe had the intention to reach a mandate at the meeting of the ambassadors today, but it was not clear yet whether we would have the required majority,\u201d said Belgium\u2019s spokesperson. \u201cIn the last hours before the meeting it \u2026 was clear that the required qualified majority could just not be met today so we decided to remove the item from the agenda and to continue the consultation between the Member States \u2014 to continue working on the text.\u201d<\/p>\n This is important as EU law tends to be a three-way affair, with the Commission proposing legislation and the Parliament and Council debating (and often amending) draft laws until a final compromise can be reached. But these so-called trilogue talks on the CSAM-scanning file can\u2019t start until the Council adopts its position. So if Member States remain divided, as they have been for some two years since the Commission introduced the CSAM-scanning proposal<\/a>, the file will remain parked.<\/p>\n Earlier this week, Signal president Meredith Whittaker dialed up her attacks on the controversial EU proposal<\/a>. \u201c[M]andating mass scanning of private communications fundamentally undermines encryption. Full stop,\u201d she warned, accusing regional lawmakers of attempting a cynical rebrand of client-side scanning to try to cloak a plan that amounts to mass surveillance of private communications.<\/p>\n Despite loud and growing alarm over the bloc\u2019s apparent hard-pivot to digital surveillance, the European Commission and Council have continued to push for a framework that would require message platforms to bake in scanning of citizens\u2019 private messages \u2014 including for end-to-end encrypted (E2EE) platforms like Signal \u2014 rather than supporting the more targeted searches<\/a> and carve out for E2EE platforms proposed by MEPs in the European Parliament last year.<\/p>\n Last month details of a revised CSAM proposal<\/a> circulated by the Belgians for Member States\u2019 governments\u2019 consideration emerged via leaks, causing fresh consternation. <\/p>\n Pirate Party MEP Patrick Breyer, who has opposed the Commission\u2019s CSAM-scanning plan from the start, argues that the Council\u2019s revised proposal will require messaging app users in the EU to agree to scanning of all images and videos they sent to others, via a technical scheme the text couches as \u201cupload moderation,\u201d or else lose the ability to send imagery to others. \u201cThe leaked Belgian proposal means that the essence of the EU\u00a0Commission\u2019s extreme and unprecedented initial chat control proposal\u00a0would be implemented unchanged,\u201d he warned at the time.<\/p>\n Private messaging app makers including Signal have also warned they would leave the EU rather than be forced to comply with a mass surveillance law. <\/p>\n In a press email Thursday, Breyer welcomed the failure of enough EU ambassadors\u2019 to agree a way forward, but he cautioned that this is likely just a stay of execution, writing: \u201cFor now the surveillance extremists among the EU governments and Big\u00a0Sister [home affairs commissioner] Ylva Johansson<\/a> have failed to build a qualified majority. But\u00a0they will not give up and could try again in the next few days. When\u00a0will they finally learn from the EU Parliament that effective,\u00a0court-proof and majority-capable child protection needs a new approach?\u201d<\/p>\n Also responding to the Council\u2019s setback in a statement, Proton founder Andy Yen made a similar point about the need to keep up the fight. \u201cWe must not rest on our laurels,\u201d he wrote. \u201cAnti-encryption proposals have been defeated before only to be repackaged and brought back into the political arena again and again and again. It\u2019s vital that the defenders of privacy remain vigilant and don\u2019t fall for the spin and window-dressing when the next attack on encryption is launched.\u201d<\/p>\n It certainly looks like any celebration of the Council\u2019s ongoing divisions on the file should be tempered with caution as Member States\u2019 governments appear to be a hair\u2019s distance away from reaching the necessary qualified majority to kick off talks with MEPs, in which they would immediately be pressing parliamentarians to agree to legislate for mass scanning of citizens\u2019 devices despite their own opposition. \u201cWe are extremely, extremely close to a qualified majority,\u201d Belgian\u2019s spokesperson told TechCrunch. \u201cIf just one country changes opinion we have a qualified majority and we have a mandate for the Council.\u201d<\/p>\n<\/div>\n The spokesperson also told us that a final coreper meeting next week, the last before its six-month term ends, already has a full agenda, suggesting that talks to try to agree the Council\u2019s mandate will therefore fall to Hungary, which takes up the rotating Council presidency for six months starting on July 1.<\/p>\n \u201cAs far as we are concerned, as presidency, in the coming days \u2014 at the expert level \u2014 we continue to work and to see whether the Member States that were not happy or satisfied with the proposal we will continue to discuss how we can fine-tune it to make it viable for everyone,\u201d the spokesperson added. \u201cAnd then it will be up for the next presidency to discuss.<\/p>\n \u201cAs far as we understand they are keen to continue working on the topic. The Commission is also willing to. And the parliament is waiting for us so we need to.\u201d <\/p>\n