EU ministers urged to defend citizens' right to data privacy

European Union technical background
(Image credit: Getty Images)

Data Privacy Week kicked off in the EU with a pledge from the industry to defend encryption in 2024.

Some of the companies using this technology to develop security software, including VPN services, and secure email and messaging apps, are now calling EU ministers to defend their citizens' privacy and withdraw a worrying proposed regulation.

Deemed by critics as Chat Control, the EU Child Sexual Abuse Material (CSAM) Scanning Proposal could allow authorities to scan people's private and encrypted chats for dangerous content as a way to halt child sexual abuse (CSA) online. Yet, experts argue that going down this route rather endangers users (children included) instead.

Encryption at risk

"We all agree that ensuring children are safe online is one of the most important duties of tech companies and for this reason, we find the European Commission’s proposed Regulation extremely worrying. If it were implemented as proposed, it would negatively impact children’s privacy and security online, while also having dramatic unforeseen consequences on the EU cybersecurity landscape, creating an ineffective administrative burden," wrote the experts in an open letter.

The group, composed of trade associations, and small and medium-sized tech companies, especially pointed out the risk of having a "backdoor" to allow authorities to scan messages in end-to-end encrypted environments. 

So-called client-side scanning may help fight online crime, but, they argue, "it would also quickly be used by criminals themselves, putting citizens and businesses more at risk  online by creating vulnerabilities for all users alike." 

Among the signatories (22 in total) are popular VPN provider Surfshark, Swiss-based security software firm Proton, secure email service Tuta (formerly known as Tutanota), and encrypted messaging app developer Element.

The recent attack on encryption and the concept of client-side scanning began filling the news last year as tech companies raised the alarm on similar proposed legislation in the UK. While the Online Safety Act is now law, the messaging scanning requirement has been postponed until "it's technically feasible to do so" without breaking encryption—a solution that delays the issue rather than solving it.

In October the EU Parliament reached a historical agreement, though, asking for the removal of the Chat Control clause in order to safeguard online security and encryption. Now, it's the time for each EU Member State to agree on their own position. 

"We call on our ministers, specifically on Nancy Faeser (SPD, Germany), to choose the right side in this discussion: uphold strong encryption and protect the human right to privacy of millions of EU citizens and businesses," said Matthias Pfau, founder of German secure email provider Tuta Mail. 

According to Pfau, Europe cannot pride itself on the progress made with GDPR legislation while simultaneously promoting client-side scanning. "Such a move would destroy any credibility the EU currently holds in matters of privacy and cybersecurity," he said.

Did you know?

Mullvad campaign poster against EU Chat Control outside Stockholm airport

(Image credit: Mullvad VPN)

One of the most secure VPN providers out there, Mullvad VPN got vocal last year to raise awareness of the risks of the EU Chat Control law. It sends hundreds of emails to both journalists and politicians, while even putting giant banners across airports and the streets of some European cities. "Mullvad is usually a very silent company. This is probably the first time we really got mad enough to speak out," Jan Jonsson, CEO at Mullvad, told me when the company began its campaign in March last year.

EU State members are expected to vote on the proposed CSA regulation in the next few weeks and they hope to reach an agreement by March. Romain Digneaux, Public Policy Specialist at Proton, explained that only after that trilogue negotiations will be able to start. With EU Parliament elections happening in June, though, time is everything.

"We hope that the Belgian Presidency will act as an honest broker and take inspiration from the European Parliament to make sure that children are adequately protected, as well as everyone's right to privacy and security online," Digneaux told me. "However it looks like deep divisions still remain between member states."

All in all, experts are calling for finding a balanced approach alongside technically feasible solutions that could enhance child protection rather than undermine it. Specific requests include preserving the confidentiality of correspondence, refraining from forcing tech companies to perform mass surveillance and minimizing the administrative burden of the proposal by finding alternatives to mass scanning.

Commenting on the latter point, Digneaux told me: "There are many methods for combating crime online, as has been proven time and time again, which don’t compromise privacy and security. While we can’t publish the exact methods that we use (as that would play into the hands of the bad actors), at Proton we have a large team who work 24/7 to identify and remove bad actors and we cooperate with law enforcement within the framework of Swiss law.

"To sound horribly pragmatic, there is zero benefit to us to turn a blind eye to this behavior. In fact, the opposite, criminal behavior presents a huge threat to our entire business."

Chiara Castro
News Editor (Tech Software)

Chiara is a multimedia journalist committed to covering stories to help promote the rights and denounce the abuses of the digital side of life – wherever cybersecurity, markets, and politics tangle up. She writes news, interviews, and analysis on data privacy, online censorship, digital rights, cybercrime, and security software, with a special focus on VPNs, for TechRadar and TechRadar Pro. Got a story, tip-off, or something tech-interesting to say? Reach out to chiara.castro@futurenet.com

Read more
Conceptual image of a large group of cctv camera watching and spying on a mobile phone with messages, it illustrates digital surveillance concept
New EU Chat Control makes scanning encrypted chats optional – but privacy experts are still worried
View on National Assembly building in Paris, France, with French and European flags flying.
France rejects controversial encryption backdoor provision
Mullvad VPN working on a laptop
VPN firm warns against encryption backdoor in new ad
Privacy
"Anonymity is not a fundamental right": experts disagree with Europol chief's request for encryption back door
ignal messaging application President Meredith Whittaker poses for a photograph before an interview at the Europe's largest tech conference, the Web Summit, in Lisbon on November 4, 2022.
"We will not walk back" – Signal would rather leave the UK and Sweden than remove encryption protections
A hand holding an iPhone with the iCloud logo on screen.
UK's Apple iCloud backdoor "jeopardizes the security and privacy of millions," warn experts
Latest in Security
An American flag flying outside the US Capitol building against a blue sky
The FCC is creating a security council to bolster US defenses against cyberattacks
Image depicting hands typing on a keyboard, with phishing hooks holding files, passwords and credit cards.
Microsoft warns about a new phishing campaign impersonating Booking.com
Ransomware
Microsoft uncovers sleuthy new XCSSET MacOS malware campaign
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Meta warns of worrying security flaw hitting open source type software
Hand holding smartphone and scan fingerprint biometric identity for unlock her mobile phone
Biometrics add another layer of security to passwordless authentication
Data leak
Hacked Tata Technologies data leaked by ransomware gang
Latest in News
Google Gemini Flash 2.0 Images
I tried Gemini's new AI image generation tool - here are 5 ways to get the best art from Google's Flash 2.0
An image of the Samsung Galaxy S25 Ultra from a hands-on event
Samsung Galaxy S26 Ultra could resurrect an intriguing camera feature
Eurocom Raptor X18
At $15,000, this massive 256GB RAM laptop makes Apple's MacBook Pro look affordable, tiny and very, very slow
Cristin Milioti in Black Mirror season 7
Netflix launches trailer for Black Mirror season 7, giving us a look at its first-ever sequel episode and an unexpected returning character
A graphic of the PC Gaming Show
Get ready for a bounty of PC games on June 8, as the PC Gaming show is back
A close up of The Daily podcast from Pocket Casts' web page
‘Podcasting shouldn’t be locked behind walled gardens’: Pocket Casts slams Spotify and makes its web player free to all