EDRi-gram, 18 March 2026

EU lawmakers are currently debating the implications of mandatory client-side scanning of encrypted communications, a proposal that has raised significant concerns among digital rights advocates. The core of the debate revolves around balancing public safety objectives with the fundamental right to privacy and secure communication for all citizens. This discussion is crucial as it could set a precedent for how governments approach encryption technologies moving forward. The proposed measures, often framed as tools to combat online child abuse material and terrorism, would require platforms and service providers to scan user communications for illicit content before it is sent. This technical approach necessitates the breaking of end-to-end encryption, a cornerstone of secure digital interactions, potentially impacting a wide range of services from messaging apps to cloud storage. The feasibility and effectiveness of such scanning technologies, particularly on a large scale, remain subjects of intense technical scrutiny and debate. The impact of such legislation would be far-reaching, affecting not only individual users' privacy but also the trust placed in digital services for secure communication. Cybersecurity experts warn that weakening encryption for legitimate purposes could inadvertently create vulnerabilities exploited by malicious actors, undermining overall digital security. This debate is particularly pertinent in Europe, where regulatory efforts like the GDPR, DMA, and DSA aim to foster a more secure and rights-respecting digital environment. The ongoing discussions highlight a critical juncture for European digital policy, forcing a re-evaluation of the boundaries between security and fundamental freedoms in the digital age. The outcome of these debates will undoubtedly shape the future of digital privacy and cybersecurity across the continent and potentially influence global regulatory approaches.