Chat Control: Europe wants to read your private messages
In the name of protecting children, an EU regulation would force automatic scanning of everyone’s messages, photos and files, on every phone. Rejected by Parliament, it is back to a vote. Here is what it is, how we got here, and how to get ready.
What is Chat Control?
An EU scheme that would force messaging apps to scan the content you send, before it is even encrypted, to match it against databases. It is called “client-side scanning”: your own phone becomes the inspector.
No one in the opposition contests the goal of protecting children. What is contested is the method: an indiscriminate scan whose error rate, exploitability and inability to tell a criminal ring from teenagers texting have been documented by security researchers for years. Parliament itself backed an alternative: targeted detection orders on suspects, signed off by a judge.
What it breaks: encryption
End-to-end encryption is the sealed envelope of the digital world: no one but you and your recipient can read your messages, not even the platform. Scanning before encryption means opening the envelope before you seal it.
A backdoor in every device never stays reserved for the good guys. What can search for an image can search for a word, a face, an opinion. And infrastructure that reads the communications of 450 million people, once installed, is never removed: it waits for the next widening of its purpose.
The re-vote machine
Normally, when Parliament rejects, the story ends there: the Council stops, the Commission withdraws. This time, the EPP, the largest group, decided the result wouldn’t do.
On 17 June it asks President Roberta Metsola to revive the shelved file. The next day, Metsola herself urges EU leaders to push ahead, against the position of her own assembly. Member states put the measure back. And on 7 July, by 331 to 304, Parliament approves an urgency procedure to re-vote what it had rejected. A 27-vote margin, on a procedural question that decides everything.
We’ve seen this film
Europe has a long habit of re-running votes until it gets the right result. France and the Netherlands reject the European Constitution in 2005: two years later, the essentials return as the Lisbon Treaty, ratified without a referendum. Ireland says no to Nice (2001) and Lisbon (2008), and is made to re-vote each time. Denmark says no to Maastricht (1992), re-votes in 1993.
The unwritten rule fits in one line: no is provisional, yes is final. The difference here: in 2005 they forced a governance architecture, which can be renegotiated. In 2026 they force a surveillance architecture, which can’t be rolled back.
The arithmetic of absence
Here is the detail almost no one flagged. The vote is a second reading: the text passes on a simple majority of those voting, but rejecting it requires an absolute majority of all MEPs, 361 votes.
In March, the opponents mustered 311. They need 50 more, on the last session day before the summer break, when the chamber empties. In that setup, every absentee votes yes. Silence counts as consent. It is not a metaphor, it is the rulebook.
A stack, not a single text
To grasp the stakes, stop looking at each measure on its own, because that is how they are sold to us. One by one, none seems to change much. Stacked together, they describe something else.
Each brick arrives with its justification, reasonable, almost friendly, and each, separately, would be defensible. Stacked together, they describe a space where they know what you write, what you watch, who you are, what you spend and where you go. A space nothing leaves and where everything is seen.
“I have nothing to hide”?
You close the bathroom door with nothing to hide. Privacy is not secrecy, it is the right to choose what you show. Mass surveillance does not target you personally: it sweeps up everyone, all the time, and it gets it wrong. False positives mean your family photos reviewed by a stranger.
What you can do, now
The answer isn’t panic, it’s preparation. Protection tools are installed before you need them, not after. Move your sensitive conversations to an encrypted messenger, understand what encryption protects, and go through your whole digital defense.
This page condenses two analyses by Christophe Mazzola. For the full, line-by-line sourced story (in French):