My understanding is that this explicitly creates an exception from one of the EU privacy laws (not sure if GDPR or something else) so that providers can scan yo

My understanding is that this explicitly creates an exception from one of the EU privacy laws (not sure if GDPR or something else) so that providers can scan your content. While this doesn't seem to oblige providers to scan your content, that is expected to come in a next step.