The European Parliament has moved to revive a temporary legal framework allowing messaging services to scan private communications for child sexual abuse material (CSAM). Following a procedural shift led by Parliament President Roberta Metsola, lawmakers voted in July 2026 to permit a limited extension of these scanning powers until April 2028, despite previous opposition from a majority of members. The proposal now requires a final position from the European Commission and formal approval from the Council of the European Union to become law.
Legislative Background and the "Chat Control" Debate
The initiative, often referred to as "Chat Control," seeks to provide an exception to EU privacy regulations that would otherwise prohibit the automated scanning of private messages. While the European Parliament had previously voted against extending such measures in early 2026, the legislative path was reopened after the Council of the European Union maintained its support for the policy.
The debate centers on balancing the protection of user privacy with the necessity of identifying illegal content. The previous temporary authorization for voluntary scanning expired in April 2026, leaving a regulatory gap that proponents argue hinders law enforcement efforts.
Scope of Proposed Automated Scanning
The proposed regulation does not authorize the decryption of end-to-end encrypted messages. Instead, it focuses on automated scanning technology that processes content—including photos, videos, and text—directly on a user’s device before the encryption process occurs.
Under the current parliamentary proposal, several safeguards are intended to limit the scope of these scans:
- Targeted Material: Scans would be restricted to identifying known child sexual abuse material rather than general surveillance.
- Human Verification: Tech companies would be required to implement a human verification process to review flagged content before reporting any suspected cases to authorities to prevent algorithmic errors.
- Privacy Protections: A majority of the Parliament has insisted that the content of messages currently protected by end-to-end encryption must remain untouched by these scanning measures.
Criticism and Procedural Controversy
The decision to bring the proposal back to the floor in July 2026 drew criticism from various political factions. The use of an expedited procedure, requested by the European People’s Party (EVP), was labeled by some members as an attempt to bypass standard deliberation.
Critics, including members of the Green faction, have argued that the process leverages procedural loopholes to force a vote before the summer recess. Opponents of the measure, such as the Chaos Computer Club, have warned that implementing such scanning infrastructure could set a precedent for mass surveillance, regardless of the stated intent to target specific illegal content.
Current Status of the Legislation
The vote in July 2026 represents a preliminary step in a complex legislative process. To finalize the rules, the following steps are required:
- Commission Review: The European Commission must issue a formal opinion on the amendments requested by the European Parliament.
- Council Approval: The Council of the European Union, representing the member states, must reach a final agreement on the text.
- Final Adoption: Once both the Parliament and the Council align on the specific language, the regulation can be formally adopted.
The proposed extension is intended to remain in effect until April 2028, providing a stopgap measure while negotiations continue on a long-term, permanent solution for the detection of illegal content on digital communication platforms.