Bezpečnost online aktivit se zaměřením na tok osobních dat uživatelů a koncept Chat Control (CSAR)

Abstract

This thesis examines the proposed European CSAR regulation, known as Chat Control. It explores the implications for privacy protection, digital communication security, and the handling of personal data. The thesis describes the function of the CSAR proposal and its relationship to the GDPR. It analyzes the potential use of scanned data and the risks associated with the implementation of private message monitoring. The thesis includes an evaluation of hypotheses regarding communication security, personalized advertising mechanisms, and the impacts of implementing the CSAR proposal. Furthermore, the thesis describes the legislative development of the proposal, its practical application, and the potential technical and legal impacts on both service providers and users. In the practical section, the thesis focuses on analyzing available information, identifying risks using an Ishikawa diagram, and evaluating them based on probability and severity of impact according to a risk matrix. The evaluation shows that the proposed system poses significant technical, operational, and legal risks, particularly the weakening of E2EE, the creation of a new surveillance infrastructure, and the possibility of circumventing detection mechanisms. The conclusion of the thesis states that the current proposal’s contribution to the protection of minors is ineffective, while the intrusion into privacy and communication security is significant and long-term. The thesis therefore emphasizes the need for preventive measures, targeted investigations, and secure service design rather than blanket scanning of communications.