Hacker News Reader

Here's one regulatory measure that's enforced already and seems to fit within the criteria being described: https://eur-lex.europa.eu/eli/reg/2021/1232/oj

(agreed, it would be nice to have direct links to the enacted and proposed regulations to compare and understand the language used)

View on HN

'Enforced' isn't the right word for that legislation - it's a derogation, meaning it's removing rules, not creating them.

Specifically, that regulation gives service providers a temporary legal mechanism to continue to scan their own traffic for CSAM, if and only if they want to do so, without breaking the law due to GDPR etc (which otherwise made doing so arguably illegal). It just re-legalized the scanning that service providers were doing voluntarily before GDPR, and which they're doing regardless outside the EU anyway.

Thanks for the explainer, that makes sense.

Reply on news.ycombinator.com