Germany Signals Its Dissent of EU’s Proposed Digital Monitoring Law
Earlier this week, trade press reported that Germany, long-seen as a potential swing vote on the issue, might swing in favor of European Union legislation designed to give law enforcement access to encrypted application data on personal devices. However, the German federal minister of justice, Stefanie Hubig, appeared to close that door, saying, “Mass scanning of private messages must be taboo in a constitutional state. German will not agree to such proposals at the EU level.”
The EU legislation, known colloquially as “Chat Control,” would require service providers, if compelled by a court, to scan all material communicated through their applications for abusive or illegal material. The EU says the law is needed to detect child sexual abuse material. Privacy advocates say the legislation effectively means there would no longer be any digital privacy rights. The legislation, which was originally proposed in 2022, is set for a vote on 14 October.
End-to-end encryption platforms, such as Signal and WhatsApp, would have to incorporate a mechanism that scans material prior to it entering the platforms’ secure environment. Signal CEO Meredith Whittaker said in 2024 that if the law passes, Signal would not comply and would effectively pull out of EU countries. The company reiterated their position in a document released on 3 October:
“For Signal, Chat Control is also an existential threat. We do one thing and we do it very, very well: We provide the world’s largest truly private communications platform. And we know that encryption either works for everyone, or it doesn’t work for anyone.”
On the other side of the argument, the FBI calls end-to-end encryption like that provided by Signal “warrant-proof encryption” because it “prevents anyone other than end-users or device owners from seeing readable, decrypted digital content.” Such networks, the FBI argues, are a key enabler of criminal activity. The FBI says it is not opposed to strong encryption, but it says providers that manage encrypted data should be able to decrypt data and provide it to law enforcement in response to court orders.
Without Germany’s support, the EU law is not expected to pass. At least one European Court has ruled that strong encryption is a fundamental privacy right. However, as evidenced by the FBI’s position, the continuing push from the EU, and the row between Apple and the United Kingdom, which demanded access to Apple users’ encrypted information, the issue is far from settled.
