EU Parliament Passes Chat Control Law Allowing Chat Scans Through 2028
EU lawmakers approved a regulation enabling tech firms to scan private messages for child abuse material, with an exemption for end-to-end encrypted chats.

The European Parliament has passed a controversial 'chat control' regulation that permits technology companies to scan private communications for child sexual abuse material until 2028. The measure has sparked debate over privacy implications and the balance between security and encryption.
Under the new rules, providers of messaging services may be required to detect and report abusive content. However, the regulation includes an exemption for end-to-end encrypted messages, meaning authorities cannot compel companies to break encryption to scan such conversations.
Privacy and Encrypted Communications
The exemption for end-to-end encryption is a key concession to privacy advocates. Critics had warned that mandatory scanning of all messages could weaken encryption standards and undermine user trust in secure communication tools.
- The regulation applies to email, chat apps, and other private messaging services.
- Companies must report detected abuse to national authorities.
- The rules are temporary, set to expire in 2028 unless renewed.
The European Commission has framed the law as a necessary tool to combat child exploitation online, while privacy groups argue it creates a surveillance infrastructure. The regulation now enters a implementation phase where technical standards will be developed.