So regular folks would get scanned, but the bank's private messaging service isn't included. Just like the child pornographer's private messaging service won't be included either.
So app developers would be required to add code that will scan every message you send for "sensitive" content (which can be defined however the politicians like and be changed any time), and the app will report your message to the government.
https://www.patrick-breyer.de/en/majority-for-chat-control-p...
- providers spend money on having a counter-abuse team
- providers and authorities cooperate to identify risks
- providers implement proportional controls based on the risks
users can continue to run their own private stuff.
it seems this has almost nothing do with the organized sex crime stuff, it's about catching those lone pervs who realized they can send dick picks to minors all day.
see page 45 and 46 https://cdn.netzpolitik.org/wp-upload/2024/05/2024-05-28_Cou...
"... measures shall be ... targeted and proportionate in relation to that risk, taking into account, in particular, the seriousness of the risk as well as the provider’s financial and technological capabilities and the number of users; ..."
So whenever you send anything to example.com you also send it to government-snooping-service.org?domain=example.com.
And if you refuse to adjust your app you will get fined I guess.
Will curl have to self report every request? Lol...
Every client? Like will axios need to self report?
No, it's client side scanning - you have a database with bad material / a neural network trained to detect such material. Only when it detects a positive match, it will contact the government server.
For actual details in the draft see
page 45 and 46 ... https://cdn.netzpolitik.org/wp-upload/2024/05/2024-05-28_Cou...
...
"... measures shall be ... targeted and proportionate in relation to that risk, taking into account, in particular, the seriousness of the risk as well as the provider’s financial and technological capabilities and the number of users; ..."
https://cdn.netzpolitik.org/wp-upload/2024/05/2024-05-28_Cou...
for more details on this thing see page 45 and 46
in general this is a framework to
- have big players to spend money, have a team that for this, and have effective "parental controls" (have more age-appropriatedness controls, more tagging options for users/content, etc)
- have an EU center that works on the technological part of the problem
Will TLS have to be redone with a third snooping party in the mix? Is that what we're going for here?