EU Parliament Approves “Chat Control” Law Extending Private Message Scans Until 2028

How the Scanning Mechanism Is Expected

The European Parliament voted on July 10, 2026 to adopt a new „chat control” framework. The measure permits technology companies to scan private messages for illegal content, such as child sexual abuse material, while preserving end‑to‑end encryption. The law will remain in force for the next six years, until 2028.

The decision follows years of debate over how to balance online safety with privacy rights. Under the new rules, platforms like WhatsApp, Facebook Messenger and Telegram must implement automated scanning tools that flag illicit material before it reaches users. However, any conversation protected by end‑to‑end encryption is exempt, meaning the content remains unreadable to the service provider. Lawmakers argue the exemption safeguards the core privacy guarantee, while critics warn it creates a loophole for perpetrators to exploit. The legislation aligns with the EU’s broader Digital Services Act, which seeks to hold online intermediaries accountable for harmful content.

Tech firms will be required to deploy AI‑driven filters that analyze metadata and message fragments in real time. If a system detects a potential violation, it must temporarily halt delivery and forward the content to a national authority for review. The European Commission estimates that the new tools could intercept up to 30 % of illegal material before it spreads. Companies will also need to maintain transparent reporting dashboards, showing the number of scans performed and the outcomes of each case.

Will the Exemption for End‑to‑End Encryption Undermine the Law’s Effectiveness?

MEPs emphasized that the rule is not a blanket surveillance scheme. „We are targeting only the most egregious crimes,” said a parliamentarian from Germany. „The exemption for end‑to‑end encryption ensures that ordinary private conversations stay private.” The law also includes safeguards to prevent misuse, such as independent audits and penalties for over‑collection of data.

Critics argue that allowing encrypted chats to escape scrutiny could hamper law‑enforcement efforts. They point to recent cases where perpetrators used encrypted apps to share illicit images, evading detection. Some privacy advocates fear the measure sets a precedent for future encroachments on digital confidentiality.

Proponents counter that the exemption is essential to preserve user trust. They note that the scanning tools focus on non‑encrypted data, which still accounts for the majority of online messaging traffic. Moreover, the legislation encourages the development of privacy‑preserving detection techniques that do not require full decryption.

The „chat control” law marks a significant step in the EU’s fight against online abuse. Its implementation will test the balance between security and privacy, and could influence similar policies worldwide. Ongoing monitoring and periodic reviews will determine whether the approach meets its intended goals without eroding fundamental digital rights.

Frequently Asked Questions

What types of illegal content are covered by the new law? The framework targets child sexual abuse material, terrorist propaganda, and other content defined as criminal under EU law.

How will companies prove compliance with the scanning requirements? They must submit regular reports to national authorities, detailing the volume of scans, false‑positive rates, and any actions taken on flagged messages.

Can users opt out of the scanning process? No, the requirement applies to all private messages that are not protected by end‑to‑end encryption. Users may choose encrypted services to avoid scanning, but non‑encrypted platforms must comply.