With “Chat Control” being pushed through—how to protect yourself from surveillance

If rules expand scanning of messages or uploads, your best protection is to limit both (1) the readable content that can be examined and (2) the metadata that can be used to profile you. The practical steps below reduce the amount of information that can be collected, shared, or retained.

Use end-to-end encryption for chats and calls Choose messaging apps that provide end-to-end encryption, where only you and the recipient can read the message content. For calls, use apps that encrypt both audio and metadata as much as possible. Avoid switching to unencrypted SMS/DMs for sensitive conversations.

Strengthen account security immediately Use a strong, unique password for each account (ideally via a password manager). Turn on two-factor authentication, and enable security alerts so you’re quickly notified of suspicious logins or changes. This doesn’t stop scanning, but it prevents account takeover, which often increases surveillance risk.

Reduce what apps can see and where they can track you Review app permissions and disable anything unnecessary (especially access to your contacts, microphone, location, and background activity). Also tighten who can view your profile or status updates. The less personal data you allow apps to access, the less they have to collect even if content scanning expands.

Be careful with backups and syncing Many apps store copies of content in backups (local or cloud). When possible, use encrypted backups for messaging/calls and review whether backups are end-to-end encrypted. If you’re using services that don’t encrypt backups, assume scanned content could exist in synced copies.

Use privacy-focused browsing practices Turn on tracking protection in your browser, reduce third-party cookies, and avoid logging into accounts on websites you don’t trust. Consider a privacy-focused DNS or VPN if you want to reduce what your internet provider can infer from your traffic.

Keep devices and software hardened Update your operating system and apps regularly. Use full-disk encryption on laptops and phones. Re-check browser extensions and remove those you don’t need—extensions are a common source of unnecessary data exposure.

Avoid sending the most sensitive material through ordinary channels Even with encryption, don’t assume every attachment path is equally protected. For highly sensitive documents, avoid standard uploads unless you know they’re end-to-end protected end-to-end (including any cloud backups) and limit how widely you share them.