{"title":"EU Chat Control — The 2026 Fight","description":"An advanced quiz on the EU's 'Chat Control' legislation — the Child Sexual Abuse Regulation (CSAR) and its interim '1.0' derogation — covering the 2026 procedural battle, what the law actually permits, which services are affected, encryption carve-outs, and the permanent regulation still under negotiation.","settings":{"shuffle_questions":false,"shuffle_options":false,"reveal_answers":false,"allow_review":true,"time_limit_seconds":0,"pass_percent":0},"questions":[{"kind":"single_choice","prompt":"What is 'Chat Control' actually the nickname for?","explanation":"Chat Control is the activist nickname for the EU's proposed Child Sexual Abuse Regulation (CSAR), first proposed by the European Commission in May 2022. The interim voluntary-scanning regime is called 'Chat Control 1.0' and the permanent proposal 'Chat Control 2.0'.","points":1,"options":[{"label":"The EU's Digital Services Act enforcement tool"},{"label":"The EU's proposed Child Sexual Abuse Regulation (CSAR)"},{"label":"A Europol database of encrypted messages"},{"label":"The ePrivacy Directive itself"}]},{"kind":"single_choice","prompt":"What did the European Parliament do on 26 March 2026 regarding the interim Chat Control 1.0 derogation?","explanation":"On 26 March 2026, Parliament voted 311–228 (with abstentions) to reject extending the interim derogation, and the legal basis lapsed on 3 April 2026. This created a roughly three-month legal gap before the Council revived the text.","points":1,"options":[{"label":"It voted to extend it until 2028 without changes"},{"label":"It referred it to the Court of Justice for review"},{"label":"It voted to reject the extension, letting the derogation lapse on 3 April"},{"label":"It unanimously approved mandatory scanning of all platforms"}]},{"kind":"single_choice","prompt":"On 9 July 2026, 314 MEPs voted to reject the Council's text while only 276 voted to keep it — yet the measure was not blocked. Why?","explanation":"Under Article 294 TFEU second-reading rules, Parliament can only reject a Council position with an absolute majority of ALL members — 361 of 720 seats — regardless of turnout. The 314 rejection votes fell 47 short, so the text passed 'by default' despite losing the vote of those present.","points":1,"options":[{"label":"Because the Council can override any Parliament vote"},{"label":"Because the Commission has the final say under the codecision procedure"},{"label":"Because rejection requires an absolute majority of all MEPs (361 of 720), which the 314 opponents did not reach"},{"label":"Because abstentions were counted as rejections and still fell short"}]},{"kind":"single_choice","prompt":"Which services does the reinstated Chat Control 1.0 regime actually cover?","explanation":"Chat Control 1.0 covers unencrypted or server-accessible communications — providers like Gmail, Snapchat, Facebook Messenger, Skype, iCloud Mail and Xbox. WhatsApp, Signal and iMessage (without iCloud backup) are end-to-end encrypted and excluded; an amendment explicitly exempting E2EE services was adopted on 9 July 2026.","points":1,"options":[{"label":"Only fully end-to-end encrypted messengers like Signal and WhatsApp"},{"label":"Only email providers, never messaging apps"},{"label":"Unencrypted or server-accessible services such as Gmail, Snapchat and Messenger, while E2EE apps are excluded"},{"label":"Every online service in the EU regardless of encryption"}]},{"kind":"single_choice","prompt":"What are the three detection methods the interim regime permits for scanning private communications?","explanation":"The regulation allows perceptual hash-matching against databases of known CSAM (e.g. NCMEC/IWF), AI-based image classification for previously unseen material, and text analysis for grooming patterns. The AI classifier for unknown material showed a false-positive rate 'as high as 20 percent' in the Commission's own implementation report.","points":1,"options":[{"label":"Perceptual hash-matching, AI image classification, and text analysis for grooming"},{"label":"Keyword filtering, IP tracing, and cookie matching"},{"label":"Metadata analysis, device fingerprinting, and network sniffing"},{"label":"Face recognition, biometric matching, and location tracking"}]},{"kind":"single_choice","prompt":"What did the Council of the EU's own Legal Service reportedly conclude about the scheme around June 2026?","explanation":"The Council's Legal Service reportedly assessed the proposal as still amounting to generalised, suspicionless scanning and warned it sits uneasily with Article 7 of the EU Charter of Fundamental Rights (respect for private life and communications). This fuels expectations of a challenge before the Court of Justice of the EU.","points":1,"options":[{"label":"That it fully complies with EU data protection law"},{"label":"That it violates Article 7 of the EU Charter protecting private communications"},{"label":"That it only applies to public posts, not private messages"},{"label":"That the Commission lacks competence to propose it"}]},{"kind":"single_choice","prompt":"Until when is the reinstated Chat Control 1.0 derogation in force?","explanation":"The Council confirmed the interim regime on 23 July 2026 by written procedure (25 in favour, one against, one abstention). It applies until 3 April 2028 or until a permanent regulation (Chat Control 2.0) enters into force, whichever comes first.","points":1,"options":[{"label":"Until 3 April 2028 or until the permanent regulation is in place"},{"label":"Until the end of 2026 only"},{"label":"Until 3 April 2027 with no possibility of renewal"},{"label":"Indefinitely with no expiry date"}]},{"kind":"single_choice","prompt":"Why do cryptographers argue that 'client-side scanning' — the method needed to scan end-to-end encrypted platforms — breaks E2EE in practice?","explanation":"Because the provider cannot read encrypted traffic, content would have to be inspected on the user's device before encryption. The 2021 'Bugs in Our Pockets' paper by prominent researchers (including Diffie, Rivest, and Schneier) concluded such scanning cannot be limited to one purpose and is 'one policy change away' from scanning for anything. Apple abandoned its similar 2021 CSAM plan after hash-collision attacks were demonstrated.","points":1,"options":[{"label":"Because encryption keys would have to be shared with law enforcement"},{"label":"Because it would slow down all EU internet traffic"},{"label":"Because content is inspected in the clear on the device before encryption, creating a repurposable surveillance hook"},{"label":"Because it requires replacing all EU data centres"}]},{"kind":"single_choice","prompt":"What is the status of 'Chat Control 2.0' — the permanent Child Sexual Abuse Regulation?","explanation":"Chat Control 2.0, proposed in May 2022, is NOT yet law. The Council only reached a negotiating position on 26 November 2025, and five trilogue rounds failed, the fifth collapsing in June 2026 over suspicionless scanning. Negotiations resume in September 2026 under the Irish Presidency.","points":1,"options":[{"label":"It was adopted into law in July 2026 together with the interim regime"},{"label":"It is still in closed-door trilogue negotiations and not yet adopted"},{"label":"It was withdrawn by the Commission in 2024"},{"label":"It applies only to platforms headquartered outside the EU"}]},{"kind":"single_choice","prompt":"How did Signal's president Meredith Whittaker respond to the prospect of mandatory client-side scanning under a permanent regulation?","explanation":"Whittaker has said repeatedly that Signal would leave the EU rather than implement client-side scanning or otherwise weaken its end-to-end encryption. German provider Tuta echoed the same position — a mandate to scan is effectively a mandate to stop offering the product.","points":1,"options":[{"label":"Signal would comply by scanning only message metadata"},{"label":"Signal would hand over encryption keys to EU authorities"},{"label":"Signal would add a voluntary scanning option for EU users"},{"label":"Signal would leave the EU rather than break its end-to-end encryption"}]}]}