EU Parliament Extends Chat Control in Second Reading

Procedural Rules and the Course of the Vote

Specifically, providers such as Meta, the company behind WhatsApp and Instagram, Microsoft and Google may continue to scan private communications for indications of child sexual abuse. In doing so, communication runs through an automated process that, on the basis of technical data, detects images or videos already known to constitute prohibited depictions, in order to prevent their further dissemination and to report them. End-to-end encrypted messages are to be exempted from the regulation.

The exemption allows major internet platforms to scan their users' messages and posts for depictions of child abuse; the Council of the European Union has three months to adopt or reject the proposed amendment excluding end-to-end encrypted messages from the regulation. If it does not act, a conciliation procedure will be initiated.

Criticism of the EPP and the Parliament's Presidency

In the run-up to the vote, the Christian Democratic EPP Group, which also includes the CDU and CSU, together with Parliament President Roberta Metsola, had surprisingly placed the issue back on the agenda, even though the majority of MEPs had already spoken out against it in March 2026. Civil rights activists and opposition politicians sharply criticised the conduct of the EPP Group, which also includes the CDU and CSU, and of the associated Parliament President Roberta Metsola; the Greens Group spoke of an abuse of a procedural loophole.

The fact that this places all users under general suspicion had already been recognised by the EU Parliament, which is why it voted against an extension in March. Now, under pressure from the Member States and the EU Commission, it voted in an urgent procedure; this approach was highly controversial among the groups, leading to a rather chaotic vote that is now accompanied by requests for amendments.

Arguments from Supporters and Critics

Supporters of such a regulation see it as a means of detecting cases of sexual abuse early, protecting victims and bringing more perpetrators to account. Kerstin Claus, the German government's Commissioner for Abuse, warned that scrapping the so-called Chat Control would „take away a serious instrument in the fight against sexual violence" from law enforcement authorities. Proponents also emphasise that this is not about monitoring private chats, but only about searching for images based on known patterns.

Critics see it differently. Elina Eickstädt, spokesperson for the Chaos Computer Club, stated that the legislative proposal on Chat Control would „roll out a surveillance infrastructure that has never existed before." Opponents such as the German Child Protection Association argue that „depictions of sexualised violence are generally not exchanged via private messengers but via file-hosting services"; „indiscriminate scanning is important there". Chat control measures intrude deeply into the privacy of children as well; instead of indiscriminate surveillance, targeted measures such as prevention and education are needed.

Critics also demand that providers be obliged to comply with binding security requirements, carry out risk analyses and scan unencrypted content; within the scope of existing powers, there must be more cause-based investigative work. AfD Member of the European Parliament Mary Khan called the procedure a „democratic scandal". Major tech companies such as Meta, TikTok and Snapchat had supported the approach; the EU Commission and the Member States had pushed for a swift vote.

The de facto forced extension continues the indiscriminate, suspicionless mass surveillance of users and delays the drafting of a binding solution that is compliant with the law and with data protection rules. The time available for this is now until the year 2028. Prior to transmission to the authorities, a human review of hits is also required under EU rules in order to rule out software errors.

The position of the EU Parliament will now be transmitted to the Council of the European Union. Before the regulation can enter into force, the EU Commission must also comment on Parliament's proposals and the Council must give its final approval.