EU plan to force messaging apps to scan for CSAM risks millions of false positives, experts warn

An open letter signed by 270+ security and privacy experts warns that EU Council amendments to the proposed CSAM-scanning regulation still mandate technically unsound detection in end-to-end encrypted services, risking mass surveillance, weakening cybersecurity, and producing millions of false positives daily across large platforms. The experts argue that measures like risk categorization, vetted detectors, and “person of interest” thresholds do not address foundational flaws, potentially chilling speech and harming democratic processes as the Council continues deliberations.