I was hoping most of HN would be aware that this only applies to CSAM (in fact there is a clause in there that prohibits use outside CSAM detection) and doesn't

I was hoping most of HN would be aware that this only applies to CSAM (in fact there is a clause in there that prohibits use outside CSAM detection) and doesn't affect a providers ability to just encrypt the users communications. This legislation merely means if the provider has cleartext access, they can voluntarily scan for CSAM. This basically creates a loophole in the GDPR for CSAM processing with some protections for both users and the provider. Sadly I was proven wrong, most commenters read the title, skip the content and then run off with US-based narratives about Snowden and PRISM or some other new noun that the conspiracy people use to scare people off their political platform.