Encryption
EU Chat Control 1.0 (Scanning Derogation)
The 'temporary' law behind mass scanning of Europe's messages since 2021. A majority of voting MEPs tried to block its July revival and fell short of the absolute majority needed to do it, so suspicionless scanning is law again through April 2028.
EU CSA Regulation (Chat Control 2.0)
The permanent plan to mandate scanning of private messages in Europe. Five trilogue rounds have failed on the same question: suspicionless scanning of encrypted communications.
Canada Bill C-22 (Lawful Access Act)
Canada's surveillance rebuild: providers ordered to install monitoring capability, encryption breakable on ministerial demand, and a year of everyone's metadata on file. Passed the Commons; the Senate is what remains.
Michigan HB 4938 (ISP Filtering and VPN Ban)
Would force ISPs to filter the internet statewide and block VPNs, proxies, and encrypted tunnels. Parked in committee, but it is the blueprint.
Cooper Davis and Devin Norring Act
Would make platforms report suspected drug activity in users' messages to the DEA, deputizing them as federal informants.
STOP CSAM Act
Would let platforms be sued for 'recklessly' hosting abuse material, which makes offering encryption itself the legal risk.
TAKE IT DOWN Act
The deepfake takedown law with a 48-hour clock, no encryption exception, and the FTC now sending warning letters.
ENCRYPT Act
A protective bill that would stop individual states from ordering companies to weaken or backdoor encryption.
EARN IT Act
Strips platforms of liability protection in a way that pressures them to break end-to-end encryption.
UK Investigatory Powers Act 2016
The Snoopers' Charter: bulk interception, state hacking, a year of everyone's browsing history on file, and secret orders that can compel companies to break their own encryption.
Lawful Access to Encrypted Data Act
A recurring proposal to force companies to build law-enforcement access into encrypted devices and messages. Last introduced in 2020.
Australia TOLA (Assistance and Access Act)
The first Western law built to compel tech companies to help break their own encryption: secret notices, criminal penalties for disclosure, and a 'systemic weakness' safeguard nobody can define.