EU Chat Control and data retention: what changes for hosting
EU Chat Control, ProtectEU and new data retention rules are pushing signal toward encrypted, least-data infrastructure — why that favours no-KYC hosting.
The EU spent 2026 in the final negotiations of Chat Control after years of deadlock, and ProtectEU proposes a technology roadmap on encryption plus new data-retention rules. Whatever the final text, the direction is consistent: more legal pressure to scan and to retain — which is precisely why least-data architecture is the resilient answer.
What the drafts actually contain
- ▹Client-side scanning appears off the table for now — the version of the fight worth defending.
- ▹A 'technology roadmap on encryption' is the open backdoor to weaken or backdoor protocols.
- ▹New data-retention proposals would force wider storage of who talked to whom, when.
- ▹Voluntary scanning rules are being pushed toward permanence.
The hosting layer of the answer
No provider is immune to lawful process, so the honest strategy is data minimisation: collect nothing, retain nothing, have nothing to hand over. A host that stores no identity and no traffic logs is structurally uninteresting to a retention regime — and a warrant canary keeps silence itself visible as a signal.