Skip to content

DEF CON 34 talks are here: 354 talks, summarized and searchable.

Browse DEF CON 34

EU's active war against data-privacy

Markus Hölsä

PrivacyTalks43 minBeginnerOpen on YouTube ↗

Where

Talks
Disobey 2026

Duration

43 min

Traces how EU chat control and high-level group proposals could erode end-to-end encryption and user privacy.

Summary

The talk opens with the EU's internal security strategy and a high-level group tasked with easing law enforcement access to digital data, covering encryption, missing data retention duties and internet-based messaging services. It then moves to tightened anti-money-laundering rules, including caps on anonymous cash and limits on anonymous crypto payments, and questions how these fit with fundamental privacy rights.

The core of the talk is the child sexual abuse regulation, known as chat control. The speaker traces its shift from voluntary scanning of unencrypted services to a proposal for mandatory scanning that would reach end-to-end encrypted messages through client-side tools and court-issued detection orders. He points to secrecy around the high-level group's meetings, funding and lobbying by child-safety organizations and a former Europol official who moved to a privacy software firm, and a Commission ad campaign aimed at countries opposing the proposal, which drew a data protection reprimand. Europol's push for broader data access is presented as evidence of mission creep.

The final part covers Council negotiations, where Germany's opposition in late 2025 is described as a turning point, followed by a compromise text that dropped mandatory scanning but kept age verification and other measures. The speaker urges listeners to contact their representatives and warns that voluntary scanning could later become compulsory. His main takeaway is that once scanning capability exists, it is hard to confine its use to the original purpose.

Related talks