If you missed the news, that’s kind of the point.

While most MEPs were packing for summer holidays, the European Parliament quietly pushed through an extension of Chat Control 1.0 — the temporary rule that lets messaging and email providers scan private communications in the name of fighting child abuse material. It’s now locked in until April 2028. And the person who made sure it didn’t quietly die this time? Parliament President Roberta Metsola herself.

How we got here

This measure was actually on its way out. Back in March, MEPs voted to let it expire after negotiations stalled. That should have been the end of it, at least for a while.

Then in late June, Metsola reopened the file and sent it back to the Council, warning that letting the rule lapse would leave a gap in child protection online. The Council bounced it right back to Parliament — timed almost perfectly with the start of vacation season, when attendance drops and pushing through anything controversial gets a lot easier.

The math tells the story. A simple majority of MEPs actually voted to reject the measure. But because EU rules require an absolute majority (360+ votes) to kill it at this stage, and turnout wasn’t high enough to hit that bar, the rejection failed on a technicality. The law stands.

There was one small concession — an amendment meant to exclude end-to-end encrypted communications from scanning. It sounds reassuring, but nobody’s clear on how far that exemption actually reaches, and the Council — which has never shown much appetite for compatibility between mass scanning and real encryption — is expected to strip it out anyway.

This isn’t a left/right issue

What’s notable here is who’s upset about it. Privacy advocates, cybersecurity researchers, and human rights groups are pushing back, alongside politicians from across the spectrum — liberal, left, and right alike. That’s rare. When groups that usually disagree on everything unite against the same bill, it’s worth paying attention to why.

The real fight is still ahead: Chat Control 2.0, the permanent version of this framework, gets debated in September. This vote was just the appetizer.

Why this matters for how you live online

Chat Control doesn’t ban encryption outright — it just requires scanning before encryption happens, which defeats the purpose of encryption entirely. If a provider is legally required to scan your messages client-side before they’re sent, it doesn’t matter how strong the encryption is on the other end.

That’s the uncomfortable truth: as long as your communications pass through someone else’s server, someone else’s infrastructure, someone else’s legal jurisdiction, you’re exposed to whatever rules that jurisdiction decides to impose — today or in three years when the framework gets revisited.

Self-hosting isn’t a silver bullet, and it won’t make you invisible to a determined adversary. But it does something meaningful: it takes you out of the pool of providers who can be legally compelled to scan at scale. A handful of people running their own Matrix server, their own mail, their own cloud — that’s not where a dragnet regulation is efficient to enforce. Mass surveillance works on mass infrastructure.

If you’ve been putting off self-hosting your email, your chat, your file sync — this is as good a reason as any to stop putting it off. A few starting points if you want to take back a little ground:

Messaging: Matrix (Synapse or Conduit) instead of relying entirely on centralized apps
Email: a self-hosted mail server, or at minimum a provider outside EU jurisdiction with a genuine no-scanning policy
Cloud storage: Nextcloud on your own hardware or a VPS you control
DNS and browsing: Pi-hole plus a privacy-respecting DNS resolver

None of these are hard anymore. That’s the whole philosophy behind this site — degoogling and self-hosting used to be a niche hobby for tinkerers. With regulations like this one, it’s starting to look more like basic hygiene.

September is coming. Chat Control 2.0 will decide whether this becomes permanent. Between now and then is the window to get your own house in order — and to make some noise about the one being built around all of us.