According to TechRadar, EU Commissioner for Home Affairs Magnus Brunner, during a December 4 LIBE committee debate, stated he favors the European Parliament’s position on targeted monitoring measures over the EU Council’s push for voluntary, indiscriminate scanning of private messages. This comes as the controversial Child Sexual Abuse Regulation (CSAR) is set to enter its final “trilogue” negotiation phase between the Parliament, Commission, and Council starting December 9. Brunner, while still backing the original 2022 Commission proposal, called the Council’s stance a “compromise of a compromise of a compromise.” He also flatly rejected the term “Chat Control” used by critics. The Parliament’s lead negotiator, Javier Zarzalejos, says they enter talks with a “strong mandate” for targeted measures, despite continued opposition from Italy, the Czech Republic, Poland, and the Netherlands.
The Voluntary Trap
Here’s the thing that gets me. The Council dropped mandatory scanning, but the so-called “voluntary” system is a major sleight of hand. As Czech Pirate MEP Markéta Gregorová put it, it’s like forcing every citizen to hand every letter to the police to be opened. If the framework and the political pressure are there, how voluntary is it really for tech companies? They’ll be strong-armed into compliance, creating a de facto mass surveillance system. Brunner can dismiss the “Chat Control” label all he wants, but if it walks like a duck and scans your private chats like a duck…
A Glimmer Of Hope For Rights?
Now, Brunner’s preference for the Parliament’s more targeted approach is being seen as a small win by digital rights folks. People like former MEP Patrick Breyer credit Zarzalejos for uniting Parliament against indiscriminate snooping. And look, targeted surveillance with actual warrants and suspicion is how law enforcement should work in a democracy. It’s the bedrock of the system. The Parliament’s position, detailed in their November press release, at least tries to hold that line. But let’s not pop the champagne yet. The original 2022 Commission proposal that Brunner still loves was a privacy nightmare. The trilogues are where the real battle happens, and compromises can gut principles quickly.
The Technical Disaster Waiting
Experts are calling this a “disaster waiting to happen,” and they’re not wrong. We’re talking about scanning encrypted communications. The only way to do that at scale is to break or bypass encryption—creating huge vulnerabilities that criminals and hostile states would absolutely exploit. It makes everyone less safe. And for what? There’s scant evidence this kind of dragnet is effective. It’s a classic security theater move: sacrifice real, functional privacy and security for the appearance of action. So we might end up with a system that doesn’t actually protect kids but does create a powerful surveillance tool. That’s a terrifying trade-off.
What Happens Next
The trilogues starting December 9 are the final showdown. The Parliament has a stronger hand now, with the Commissioner’s surprising alignment on targeting. But the Council, representing member state governments, often holds immense power in these closed-door deals. The opposition from countries like Poland and the Netherlands is crucial, but will it hold? I think the big risk is a messy, convoluted final law that claims to be “targeted” but is built on infrastructure that enables broad scanning. The devil will be in the implementation details—the kind of technical specs that often fly under the radar but define our digital lives. This fight is far from over.
