"A disaster waiting to happen" – The privacy tech world reacts to the new Chat Control bill

1. VPN
2. VPN Privacy & Security

"A disaster waiting to happen" – The privacy tech world reacts to the new Chat Control bill Features By Chiara Castro published 3 December 2025

The Czech Republic, Italy, Poland, and the Netherlands are still against the bill

Comments (0) ()

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

Image credit: Pixabay (Image credit: Getty Images)

After three years of back-and-forth, the EU Council finally agreed on the controversial Child Sexual Abuse Regulation (CSAR) bill on November 26, 2025. The bill – which has gained the nickname, Chat Control – is now likely to become law.

Despite winning the majority, the compromise on voluntary chat scanning did not garner support from all states, with Italy, the Czech Republic, Poland, and the Netherlands still in opposition to the current text. And privacy experts aren't ready to celebrate, either.

"A very sad day for privacy and a missed opportunity to invest in efforts to effectively protect children," commented Belgian cryptographer Bart Preneel on LinkedIn. Preneel was among the scientists who signed an open letter a few days before the vote to warn that the compromise still "brings high risks to society."

You may like

• "This is a political deception" − New Chat Control convinces lawmakers, but not privacy experts yet
• The EU has never been closer to agreeing on the scanning of your private chats – but how did we get here?
• Chat Control: Germany, Belgium, Italy, and Sweden shift their positions ahead of the October 14 meeting

According to former MEP for the German Pirate Party and digital rights jurist, Patrick Breyer, the EU Council has endorsed a Trojan Horse rather than fixing previous issues with the bill.

"By cementing 'voluntary' mass scanning, they are legitimizing the warrantless, error-prone mass surveillance of millions of Europeans by US corporations," he said. "This is not a victory for privacy; it is a disaster waiting to happen."

Despite the privacy backlash, the November 26 agreement means that the Danish proposal will continue to the final step of the legislative process. The EU Council, Parliament, and Commission are set to begin the trialogue negotiations to confirm the final text, with adoption expected by April 2026.

"Voluntary mass surveillance"

(Image credit: Getty Images)

The biggest change with the new Danish Chat Control text is in its approach to chat scanning. From forcing messaging services – including those using end-to-end encryption – to perform indiscriminate scanning on the lookout for child sexual abuse material (CSAM), providers will now have the option to choose whether to scan all users' chats or not.

This has been considered a victory by many, as it saves encryption from being undermined with a backdoor. Director of Government Affairs and Advocacy at the Internet Society, Callum Voge, told TechRadar it was "a positive step forward for the security of communications of European residents."

But the devil may be in the details. The text does include a provision that could force companies to scan messages if their services are deemed to be "high-risk." The bill also includes the possibility for the European Commission to review the law every three years, so widespread scanning could be implemented at a later date.

And while Recital 17a says that "Nothing in this Regulation should be understood as imposing any detection obligations on providers," it's yet to be seen how this wording is interpreted at the trialogue negotiations.

You may like

• "This is a political deception" − New Chat Control convinces lawmakers, but not privacy experts yet
• The EU has never been closer to agreeing on the scanning of your private chats – but how did we get here?
• Chat Control: Germany, Belgium, Italy, and Sweden shift their positions ahead of the October 14 meeting

What's certain is that, for Breyer, "voluntary" scanning still fails short in protecting EU citizens from mass surveillance. He said: "Calling this ‘voluntary’ does not make the violation of the digital secrecy of correspondence any less severe. We must stop pretending that 'voluntary' mass surveillance is acceptable in a democracy."

This stance is also shared by one of the best VPNs on the market, Mullvad VPN. "The EU Council failed to implement mandatory mass surveillance. However, in its proposal, they are laying the groundwork for mass surveillance in the future."

Beyond scanning and encryption

While the new Chat Control has tried to fix existing privacy and security issues around mandatory encryption backdoors, it has also added other provisions that experts fear could jeopardize EU citizens' digital rights.

Under the November 13 proposal, messaging service providers must take all necessary measures to protect children, including performing age verification checks to "reliably identify child users."

While the Council stressed that age verification methods must be "privacy-preserving," many think this will be impossible to achieve in practice.

"Even if age verification is done in a privacy-friendly way (unclear that this is how it will work), it is easy to bypass (just check what happened in the UK)," Preneel wrote on LinkedIn. He was likely referring to the spike in VPN usage linked to age verification laws.

All in all, Preneel says: "Age assessment is highly problematic for privacy. There is no scientific study demonstrating that these technologies are effective."

The bill's new text also contains provisions on website blocking obligations that worry the team at Mullvad. "Once this infrastructure is in place, it also opens the door to a slippery slope when it comes to censorship," said the Swedish VPN firm.

What's next?

Despite the controversy, the Danish Presidency managed to convince the majority of EU members to support its compromise, paving the way for the trialogue negotiations to finally kick off.

This means that the EU Parliament, Council, and Commission are now set to work together to agree on a final, binding text.

"My expectation is that there will be strong pressure to conclude these negotiations quickly," Voge told TechRadar. However, he said the April deadline may be too soon to finalize the bill.

As discussions are set to start soon, Mullvad is urging the Parliament to stand firm and not deviate from previous positions, urging MEPs to say "no to mass surveillance whatsoever without suspicion and a court order, no ID-verification requirements, and no censorship of legal content."

According to Voge, however, the EU Commission is most likely to put its foot down if needed. He said: "The Commission is the one that has an opposing view when it comes to encryption. We will need to watch the trilogue closely to see what trade-off the three parties might agree to."

Today's best VPN deals+3 MONTHS FREENordVPN 2 Year US$2.99/mthView+3 months freeSurfshark 24 Months US$1.99/mthViewProton VPN 24 Month US$2.49/mthView+4 MONTHS FREEExpressVPN 24 month US$3.49/mthViewWe check over 250 million products every day for the best prices

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

CATEGORIES Cyber Security Computing Computing Security Chiara CastroSocial Links NavigationNews Editor (Tech Software)

Chiara is a multimedia journalist committed to covering stories to help promote the rights and denounce the abuses of the digital side of life – wherever cybersecurity, markets, and politics tangle up. She believes an open, uncensored, and private internet is a basic human need and wants to use her knowledge of VPNs to help readers take back control. She writes news, interviews, and analysis on data privacy, online censorship, digital rights, tech policies, and security software, with a special focus on VPNs, for TechRadar and TechRadar Pro. Got a story, tip-off, or something tech-interesting to say? Reach out to [email protected]

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

Logout Read more "This is a political deception" − New Chat Control convinces lawmakers, but not privacy experts yet    The EU has never been closer to agreeing on the scanning of your private chats – but how did we get here?    Chat Control: Germany, Belgium, Italy, and Sweden shift their positions ahead of the October 14 meeting    "A major step backwards for privacy" – The VPN industry speaks out against Chat Control    Chat Control: The list of countries opposing the law grows, but support remains strong    Chat Control: Can the EU Parliament save our encrypted chats?    Latest in VPN Privacy & Security Russia's Digital Iron Curtain: WhatsApp next on the chopping block    Australia expects platforms to "stop under-16s from using VPNs" to evade social media ban    Experts "deeply concerned" by India's plan to force all smartphones to run pre-installed security app    US Congress to consider App Store age verification measures    Age verification or censorship? Missouri's new rules are age-gating way more than adult sites    LaLiga football streaming behind Cloudflare weekend outages as Spaniards turn to Proton VPN    Latest in Features A Knives Out Muppet movie feels more likely than ever thanks to Sesame Street    Squarespace’s Cyber Week continues - grab 20% off before it’s gone    "A disaster waiting to happen" – The privacy tech world reacts to the new Chat Control bill    Love lattes? I test coffee makers for a living and these are my top 3 recommendations for the creamiest drinks    ChatGPT vs Gemini vs Claude: Which AI has the best eye?    Ananta developers weigh in on GTA 6 comparisons – ‘there are still very many key differences between us’    LATEST ARTICLES

1. 1"A disaster waiting to happen" – The privacy tech world reacts to the new Chat Control bill
2. 2ExpressVPN's latest update boosts connection speeds and revamps its Mac app
3. 3MSI Cubi NUC AI+ 2MG mini PC review
4. 4Netflix celebrates Kpop Demon Hunters' Spotify Wrapped 2025 success with heartfelt HUNTR/X 'thank you' message – but some fans think it was made by AI
5. 5A Knives Out Muppet movie feels more likely than ever thanks to Sesame Street