EU Parliament Advances Chat-Scanning Extension With Encryption Carve-Out

The measure dubbed “chat control” is a temporary derogation from the European Union’s ePrivacy Directive, allowing communications providers to voluntarily detect, report and remove child sexual abuse material and grooming activity. It is designed to prevent a legal vacuum while the EU negotiates a permanent framework. Supporters say the tools are essential for child protection, while cryptography and privacy advocates warn that broad scanning of private communications could undermine digital privacy and secure messaging.

On July 9, the European Parliament voted 314-276, with 17 abstentions, to reject the Council of the EU’s position. The motion nevertheless failed because rejection at second reading required an absolute majority of 360 lawmakers. Parliament also adopted amendments excluding communications protected by end-to-end encryption. The revised text now returns to the Council, which has three months to accept or reject the changes; the Council’s proposed derogation would remain in effect through April 3, 2028.