The European Parliament has reinstated legislation allowing digital platforms to scan communications, such as emails and social networks, for child sexual abuse material until 2028. Encrypted messages are currently exempt, with the decision aimed at strengthening the protection of minors online.
Critics warn of risks of mass surveillance and errors from the use of artificial intelligence, raising concerns about citizens' privacy. At the same time, discussions continue for stricter measures that could impose controls even on encrypted services, provoking strong reactions from data protection organizations.
The European Parliament has spent the past few years trying to decide whether to allow platform owners to scan everyone’s messages for Child Sexual Abuse Material (CSAM). An early version of the law was in effect from 2021 to April 2026 and was revived this week.
The European Parliament voted on Thursday to reinstate legislation that allows companies like Google, Meta and other digital communications providers to scan messages, emails, photos and other files for illegal content. Privacy advocates have long argued over whether the practice should be made mandatory.
The current law, introduced in 2021 and called Chat Control 1.0, allows email providers, social media platforms, and cloud services to screen online communications for CSAM. However, end-to-end encrypted messaging services like Signal and WhatsApp are exempt.
According to Patrick Breyer, blogger and MEP opposed to the measure, Chat Control 1.0 expired in April after Parliament voted against its extension. A vote in July reinstated the law until 2028, although 314 MPs voted against, 276 in favour and 17 abstained. Repealing Chat Control required an absolute majority of 361 votes.
Many supportive lawmakers see the status quo as a stepping stone to a stricter version, informally called Chat Control 2.0, which would require platform owners to scan all client-side communications, even those with end-to-end encryption. The encrypted email company Tuta argued late last year that the measure would repeal end-to-end encryption, and Germany has indicated its intention to oppose the legislation. The EU Council presidency (from Denmark) also withdrew its support shortly afterwards, but the issue remains a hot topic in the European Parliament.
Breyer argues that Chat Control amounts to warrantless mass surveillance, mainly by American tech giants, and does not effectively protect children. The MEP warns that the strategy gives Meta too much power over the privacy of European citizens, drowns authorities with useless data and can sometimes unnecessarily criminalize minors. In addition, some companies use artificial intelligence-based methods to scan messages, which can produce false positives.
Chat Control supporters claim that reports from automated scans have already saved children, but Breyer argues that existing methods, such as targeted scanning after obtaining a warrant and user-based reporting, are more effective.
Although the press releases will range from very select to rare, I said I'd pass...because sometimes the editors hide.
