Let’s not dress this up. On 9 July 2026, the European Parliament took a law that had already been killed — killed fair and square, in a full chamber, by its own members — and brought it back from the dead using a loophole. Not a new argument. Not a change of heart. A loophole, timed for the one day a year when the fewest people would be there to stop it.
If you think that sentence sounds dramatic, wait until you see the numbers.
They lost. They won anyway.
In March 2026, with the chamber full, Parliament rejected extending Chat Control. Amendment 34 killed it by a single vote. Done. Buried. That’s how democracy is supposed to work: you lose a vote, you go back to the drawing board.
Instead, the European People’s Party went looking for a back door — and found one. On 7 July, using a rarely invoked emergency procedure, they forced the file back onto the agenda. MEP Markéta Gregorová stood up and told them, on the record, that this violated Parliament’s own rules. They did it anyway: 331 to 304.
Then came the real trick. They scheduled the final vote for the very last plenary session before the summer recess — the one day guaranteed to empty the building. Of 720 MEPs, only 607 bothered, or were able, to show up.
And here’s the part that should make you angry: 314 MEPs voted to kill Chat Control. Only 276 voted to keep it. That’s a real majority against it — 38 votes clear. In any normal vote, that’s a landslide rejection.
But because this was rammed through as a second reading, the rules demanded something else entirely: not a majority of the room, but an absolute majority of the entire 720-seat Parliament — 361 votes — just to say no. Empty seats don’t abstain. Empty seats vote yes by default.
314 was not enough. Mass surveillance of every private citizen in the EU is back on the books until 2028, not because anyone won the argument, but because 113 elected representatives weren’t in the room to lose it with them.
Call it what it is: a procedural coup against your own privacy, executed by people who knew exactly what they were doing.
This is not a technicality. This is a backdoor into your phone.
Don’t let anyone soften this. Chat Control 1.0 hands Meta, Google, Microsoft and Snap a legal green light to scan the private messages of every ordinary, unsuspected citizen — no warrant, no judge, no suspicion required. And this is the mild version. The permanent successor, Chat Control 2.0, is still being negotiated, and it goes further: client-side scanning, which means inspecting your messages on your own device before encryption even happens.
That is not a security feature. That is a backdoor with a friendly name. And there is no such thing as a backdoor that only works for “the good guys.” Once that capability exists on every phone in Europe, it exists for hackers, for hostile states, for anyone who finds the key — because there will always be a key, and keys leak. Cybersecurity researchers have said this for years. Nobody in Brussels is listening, because listening isn’t the point anymore. Winning by attrition is.
Luxembourg has every reason to be furious about this
This isn’t an abstract Brussels drama for us. Luxembourg has actively built itself into a trusted European digital hub — and this law is a direct attack on that project.
The Grand Duchy sits in the bloc of member states, alongside Germany, that has pushed back against mandatory encryption-breaking in the Chat Control 2.0 negotiations. We host LU-CIX, one of Europe’s key internet exchanges. We back Luxchat, a genuinely end-to-end encrypted messaging platform — proof that Luxembourg believes secure communication is worth building properly. I’m finishing my last mandate as LU-CIX’s VP, and I can tell you this isn’t abstract for us — it’s the infrastructure we’ve spent years building.
You cannot simultaneously sell Luxembourg as a secure digital jurisdiction and force every encrypted platform operating here to install a scanner before the message even leaves the device. Pick one. Brussels is trying to force us to pick neither.
Luxembourg MP Sven Clement called the manoeuvre exactly what it was, on the record: not democracy — a trick. He didn’t hedge, and he shouldn’t have to. Entrepreneur Xavier Buck, founder of NameSpace and EBRAND and one of the people who actually helped build this country’s digital credibility, called it a heist, executed step by step, while half the chamber was already on a plane to the beach. He’s right, and the fact that a builder of Luxembourg’s tech sector felt compelled to say so publicly should tell Brussels something.
Stop calling this a rules dispute. Call it what it is.
Every defender of this vote will tell you it was all perfectly legal, all within the Rules of Procedure. Fine. Legal is not the same as legitimate. A majority of the people who showed up to vote said no to this law — twice, across two separate amendments — and it passed anyway, because the people who wanted it knew the calendar better than the people who opposed it.
That is not “Parliament working as intended.” That is Parliament being gamed, in full view, by people confident that outrage fades faster than legislation gets repealed.
This fight isn’t over — and that’s exactly why you can’t sit this one out
Chat Control 2.0 — the permanent, harder version — is still being negotiated. Trilogue talks resume in September. The precedent Brussels just set is clear: if you can’t win the argument, change the arithmetic and wait for the room to empty.
So don’t wait for September to be angry. Contact Luxembourg’s MEPs now. Ask them, directly, how they intend to vote when the permanent regulation comes up — and whether they’ll let the government’s Council position, standing alongside Germany against mandatory scanning, actually hold. March proved a single vote can decide this. Make sure the next vote isn’t decided by who forgot to book a later flight.
A note on fairness: supporters of this regulation — including child-protection organisations and parts of law enforcement — argue in good faith that voluntary scanning saves real victims and that the current law only touches unencrypted services. That’s a genuine position, held by people who care about a genuine problem. But a good cause doesn’t excuse a bad process, and nobody — on either side of this debate — should be comfortable with legislation that survives because the majority who opposed it wasn’t big enough to overcome an empty room.
