All About Cookies is an independent, advertising-supported website. Some of the offers that appear on this site are from third-party advertisers from which All About Cookies receives compensation. This compensation may impact how and where products appear on this site (including, for example, the order in which they appear).
All About Cookies does not include all financial or credit offers that might be available to consumers nor do we include all companies or all available products. Information is accurate as of the publishing date and has not been provided or endorsed by the advertiser.
The All About Cookies editorial team strives to provide accurate, in-depth information and reviews to help you, our reader, make online privacy decisions with confidence. Here's what you can expect from us:
The European Parliament has approved an extension of one of the European Union's most controversial digital privacy measures, allowing certain online platforms to resume voluntarily scanning some private communications for child sexual abuse material (CSAM) while lawmakers negotiate a permanent replacement.[1]
The measure, often referred to by critics as "Chat Control 1.0," passed Thursday under unusual parliamentary rules after opponents failed to secure the absolute majority needed to block it, despite more lawmakers voting against the proposal than in favor (314 against, 276 in favor, 17 abstentions).[2] The extension will take effect once EU governments (the Council) formally sign off.
Privacy advocates argue the extension enables warrantless surveillance of private conversations, while supporters say it preserves an important tool for identifying child exploitation online until permanent legislation can be agreed upon.
Chat Control includes legislation that extends a temporary exemption to the EU's ePrivacy rules that allows providers of certain communications services to voluntarily detect and report known child sexual abuse material shared through their platforms.
The original exemption was introduced in 2021 after changes to EU privacy law created uncertainty about whether companies could legally continue to use automated detection systems for child safety purposes.
Rather than requiring companies to scan messages, the law permits providers that choose to do so to continue using automated technologies to identify known CSAM while a permanent legal framework is negotiated.
The debate centers on a fundamental privacy question: Should technology companies be allowed to automatically analyze private communications in an effort to detect child abuse?
While the technology could help identify abusive material and report it to authorities, critics counter that scanning private messages — even for a legitimate purpose — creates a form of mass surveillance that undermines digital privacy and could set a precedent for broader monitoring.
The extension also lands as the EU broadens monitoring in other areas: as of July 2026, every new car sold in the bloc must include a camera that monitors the driver's face.
Former European Parliament member and digital rights advocate Patrick Breyer called Thursday's vote "a farce," arguing the outcome ignored the wishes of a majority of voting lawmakers because of the parliamentary procedure used.
"The real losers are our children," Breyer said in a statement, arguing that extending the temporary system could delay negotiations over what he believes would be a more targeted, permanent child protection framework.
According to opponents of the legislation, the temporary rules primarily affect companies that voluntarily scan unencrypted private communications.
Examples frequently cited in the debate include:
Exactly which services use automated detection technologies remains up to individual providers.
Not necessarily.
One of the amendments approved during Thursday's vote was designed to keep end-to-end encrypted (E2EE) communications outside the scope of the temporary scanning framework. Services where providers cannot access message contents — such as WhatsApp or Signal — are generally not subject to these voluntary scanning practices.
That issue remains one of the biggest sticking points in negotiations over the EU's proposed permanent Child Sexual Abuse Regulation, often dubbed "Chat Control 2.0."
The rules permit scanning only of unencrypted private messages, and only on platforms that choose to do so — all of them U.S.-based services. If you want your conversations out of scope, the fix is encryption, not a workaround. It's the same protection privacy advocates point to against warrantless U.S. surveillance of communications — the core concern driving the Chat Control fight, too.
The temporary rules are expected to remain in place while negotiations continue over a permanent child protection law.
EU institutions are expected to resume talks in September, with lawmakers still divided over whether future rules should permit broader automated scanning of private communications or instead limit detection measures to targeted investigations involving judicial oversight.
Chat Control isn't the only EU rule reshaping the apps Europeans use every day. Reddit is now asking EU users to verify their age with a selfie to comply with the bloc's tightening platform rules.
Comprehensive security bundle with VPN, email, cloud storage, and password manager
Includes Proton VPN, our top privacy VPN, which offers 20,000+ servers high-speed servers
Backed by Proton's Swiss privacy protection and end-to end encryption
[1] EU-Parlament winkt Chatkontrolle 1.0 durch – Breyer: “Wahrer Verlierer sind unsere Kinder”
[2] Temporary derogation from the ePrivacy Directive — roll-call vote results, European Parliament
/images/2023/12/01/omniwatch_review.jpg)
/images/2023/10/12/best_identity_theft_protection_with_dark_web_monitoring.jpg)
/images/2026/07/09/eu-chat-control-extended.png)
/images/2026/07/06/vpn-blocked-on-phone.png)
/images/2026/06/30/kids-act-bill-passes-house_1.png)
/images/2026/06/29/oung_female_traveler_smiling_and_with_headphones_while_using_her_smart_0swm8xL.jpg)
/images/2026/06/26/reddit-age-verification-soft-launch.png)
/images/2026/06/24/google-pixel-phone-listening.png){kind=tracking}
/authors/thomas-kent-headshot-cropped.png){kind=small}
/authors/kalleigh-lane-new.jpg){kind=small}
/images/2026/04/06/proton-logotype-purple-transparent.png)
/authors/thomas-kent-headshot-cropped.png)