BRUSSELS—A renewed European Union framework allowing online platforms to continue voluntarily detecting child sexual abuse material has reignited debate over digital privacy, with legal scholars, cybersecurity specialists and civil liberties groups warning that the measures could expand surveillance of private communications while lawmakers defend them as a necessary tool to protect children.
The temporary rules, approved by the European Parliament this month after a second-reading procedure and subject to the EU legislative process, restore an exemption from the bloc's ePrivacy rules that permits providers to continue voluntary scanning of certain communications for child sexual abuse material until 2028 while negotiations continue on permanent legislation. The measure revives an interim legal framework that had expired earlier this year.
Privacy organizations, including the European Digital Rights (EDRi) network, have criticized what they describe as "Chat Control," arguing that allowing companies to scan private messages risks undermining confidentiality and fundamental rights. EDRi has said the approach effectively delegates law-enforcement functions to private firms and raises concerns over safeguards governing users' communications.
Supporters of the legislation reject claims that it establishes mass surveillance. Members of the European People's Party and the Council of the European Union have argued that voluntary detection tools are an important means of identifying child sexual abuse material, assisting investigations and helping protect victims while a broader long-term regulatory framework is negotiated.
The latest parliamentary amendments seek to exclude communications protected by end-to-end encryption from the temporary regime, meaning encrypted messaging services would not be covered by the voluntary scanning exemption. Lawmakers backing the amendments said preserving encryption was important for protecting journalists, activists and ordinary users while maintaining efforts against online child sexual abuse through other channels.
The European Commission first proposed a permanent regulation on combating child sexual abuse online in 2022, but negotiations have stalled because member states and lawmakers have remained divided over issues including privacy protections, encryption and the scope of detection requirements.
Under the current legislative timetable, EU member states are expected to consider Parliament's amendments before work resumes on a permanent framework intended to replace the interim measures. Until then, the temporary rules are designed to provide legal continuity for voluntary detection activities while negotiations continue.
