European Parliament Extends “Chat Control” Rules Until 2028

The European Parliament has paved the way for the extension of Chat Control until 2028. This regime allows platforms to voluntarily scan certain private communications to detect child sexual abuse content. The text however rekindles a central battle in Europe: protecting children without weakening encryption and privacy.

Chat Control returns despite strong opposition

Chat Control has reached a new stage at the European Parliament. The text had already been narrowly rejected in March, then revived by a highly contested political procedure. This new vote extends the debate around message control.

The result is paradoxical. A majority of MEPs voted against the extension, with 314 votes to stop it versus 276 to maintain it. But an absolute majority of 361 votes was required to block the text. Opponents therefore won politically but lost legally. This mechanism fuels criticism. Several digital rights advocates denounce an institutional maneuver that allows maintaining an already contested measure without real parliamentary consensus.

Chat Control 1.0 relies on a temporary derogation to the ePrivacy regulation. It authorizes certain digital service providers to detect, report, and remove illegal content related to child exploitation.

The crucial point lies in the voluntary nature of the measure. Platforms are not obliged to scan all conversations. They can do so within a specific legal framework, using automated tools and internal procedures.

The version adopted by Parliament also excludes end-to-end encrypted services. WhatsApp, Signal, and Telegram are therefore not targeted as in the worst-case scenarios feared by encryption advocates. This nuance is not enough to quell the controversy. Critics argue that even voluntary scanning can establish a culture of private surveillance. It can also create errors, false positives, and political pressure to gradually expand the scope.

Chat Control divides security and privacy

Supporters of Chat Control advocate a logic of continuity. They believe that a legal void would weaken the fight against child sexual abuse content online. Large platforms must, they say, retain legal detection tools.

Opponents respond that the end does not justify all means. Automated surveillance of private communications directly impacts the right to confidentiality. It can become dangerous if extended to other content or other purposes. The debate echoes concerns already expressed in the digital ecosystem.

Web3 is sometimes presented as a possible solution, because it puts data control back in users’ hands. But this response remains partial. Authorities want effective investigative tools. Citizens want secure communications. Between the two, Europe is still seeking a clear path.

The Parliament’s vote does not close the file. Member States still hold a decisive role. They can accept amendments, contest them, or restart negotiations on the text. The timetable is sensitive. Chat Control 1.0 was supposed to be transitional, to prepare a more comprehensive permanent law. However, the final regulation on online abuse detection has been stuck since 2022.

Chat Control therefore remains a major political test. It is not only about moderation or automated detection. It is about how far the European Union is willing to go in analyzing private communications. That is precisely why figures like Vitalik Buterin have already warned about the risks to digital privacy.