EU Parliament Extends ‘Chat Control’ Law Allowing Message Scanning Until 2028

The European Parliament has voted to extend legislation permitting tech companies to scan private messages for child sexual abuse material through 2028. The measure, widely known as “chat control,” narrowly survived after only 314 lawmakers voted to block it, short of the 361 needed, while 276 supported keeping it in place.

Encryption Exemption Offers Partial Relief

Despite backing the extension, Parliament also approved an amendment exempting communications protected by end-to-end encryption from the scanning rules. Pirate Party lawmaker Markéta Gregorová called the outcome a “bittersweet victory,” noting that while encryption protections were preserved, voluntary mass scanning of other messages still passed. Supporters of the law argue it remains essential for protecting children and curbing the spread of abusive content.

The approved legislation, along with its amendments, now moves to the Council of the EU, made up of ministers from member states, who must decide whether to approve or reject it.

Background on the Ongoing Debate

The vote followed an unusual urgent procedure used earlier in the week to bring the expired framework back for reconsideration. Since the original rules lapsed in April, platforms like WhatsApp have relied on voluntary measures to identify abusive content. A permanent version of the law, referred to as “Chat Control 2.0,” remains under separate negotiation, with lawmakers set to resume discussions in September over how broadly message scanning should apply. Privacy advocates say opposition in Parliament suggests a permanent, sweeping scanning mandate remains unlikely to gain majority support.