Two laws, one nickname:
→ Chat control 1.0 is the ePrivacy derogation, voluntary CSAM scanning. It lapsed on 3 April and only closed for good on 23 July, when the Council gave its final sign-off, now running to 2028.
→ Chat control 2.0 is the CSA Regulation, the permanent framework, still in trilogue.
What each one does:
→ 1.0 permits scanning and obliges nothing.
→ 2.0 is the one that could require it, and it's the file that actually decides encryption's fate.
The EDPB has adopted yesterday the final version of its guidelines on processing personal data through blockchain technologies.
The first draft, over a year ago, took a hard line: if personal data can't be deleted from a public blockchain, the chain itself should be deleted. We spent that year making the case for a different approach, alongside co-signatories across the ecosystem. The final text is substantively unchanged from that draft.
We'll be publishing our analysis soon.
In the meantime, here you can find our position paper with detailed argumentation: