EU regulation is tightening on two fronts simultaneously

Two EU threads landed today with real teeth. Chat Control 1.0 got greenlighted by the EU Parliament, which is the surveillance-of-encrypted-messages proposal that privacy advocates have been fighting for years. Separately, the EU Commission made a preliminary finding that Instagram and Facebook's addictive design violates the Digital Services Act. Both are moving from proposal to enforcement phase.

The Chat Control thread is mostly grim. The HN crowd knows what client-side scanning means for end-to-end encryption and isn't pretending otherwise. The Meta/DSA thread generates more debate, partly because the 'addictive design' framing opens a can of worms: commenters point out that TV advertising was equally addictive and nobody regulated that, which gets to a point about who controls the message.

For builders, these are not abstract policy debates. Chat Control affects any product that handles private communications for EU users. The DSA addictive design ruling affects any product that uses engagement mechanics, notifications, feeds, or streaks to retain users.