Backdoor Vote Revives EU Chat Scans

Group of young people looking at smartphones

Europe has quietly revived a mass message-scanning regime until 2028, and it stops only at the edge of strong encryption while pulling millions of everyday chats back under automated surveillance.

Story Snapshot

European Parliament extended the “Chat Control 1.0” message-scanning regime until April 3, 2028, letting platforms again scan private chats for known child abuse images on a voluntary basis.
End-to-end encrypted apps like Signal and WhatsApp are explicitly exempt, but popular unencrypted services such as Gmail, Facebook Messenger, Instagram, and Snapchat can keep scanning users’ messages.
The law passed by procedural default even though more Members of European Parliament voted against than in favor, fueling charges of an undemocratic trick by EU elites.
Scanning remains limited to already-identified child sexual abuse material, yet critics warn this “temporary” exception builds a surveillance architecture that can later expand to other speech.

European Parliament Brings Back Chat Scanning Until 2028

The European Parliament has approved an extension of the temporary “Chat Control 1.0” rules, allowing tech companies to keep scanning certain private messages for known child sexual abuse material until April 3, 2028. The measure renews a derogation from the European Union’s ePrivacy rules, which normally bar such scanning, and restores legal cover for firms that choose to run automated tools on users’ chats, emails, and shared images. Lawmakers say this avoids a gap in child protection while they negotiate a permanent child safety law.

Under the extended regime, scanning is formally voluntary, not mandatory, for platforms. Companies are “allowed, but not required,” to detect and report already-identified child sexual abuse material on their services, mostly images and videos matched against existing databases. In practice, reporting suggests that large United States–based platforms like Gmail and Facebook Messenger had already opted into scanning before the rules briefly expired in April, and are now expected to continue or resume these systems under the renewed legal shield.

Which Services Are Affected – And Which Stay Off-Limits

The renewed rules target services where the provider can still see message content, such as standard Gmail, Facebook Messenger, Instagram direct messages, Snapchat, Skype, and chat functions on gaming platforms like Xbox. These tools either lack strong end-to-end encryption or store content in ways that allow server-side analysis, making them eligible for automated scanning under the derogation. Everyday users who rely on these apps for family chats, business, or personal matters now face the prospect of their messages being scanned by algorithms looking for abuse content.

By contrast, the European Parliament backed amendments to keep end-to-end encrypted communications outside the framework. Apps like Signal and WhatsApp, where messages are encrypted from sender to receiver and cannot be read by the provider, remain legally off-limits for routine scanning. This exemption is presented as a “small win” for privacy advocates and cryptography experts, who warned that forcing decryption or building back doors would shatter the basic promise of secure messaging and expose law-abiding users to new risks. Even so, critics stress that many people still depend on less secure services that are now open to scanning.

“Voluntary” Scanning, Child Safety Claims, and Missing Evidence

Supporters of the extension argue that it preserves vital tools to fight child sexual abuse online while legislators hammer out a permanent child protection scheme. They say a legal void would weaken efforts against abuse networks and remove detection methods that big platforms already use. The text focuses on scanning for known abuse material, not broad fishing expeditions, and appears to rule out direct government access to private messages or forced breaking of end-to-end encryption. For many conservatives, protecting children from exploitation is a core duty of any serious government.

Yet even some child protection advocates admit there is no clear evidence that suspicionless mass scanning of private chats has increased convictions or rescued more children compared with traditional policing and focused investigations. Commission figures cited by critics show that only about a third of abuse reports in 2024 came from private chat scanning, with most alerts coming from public posts and cloud storage, where content is easier to review without hitting privacy rights as hard. The European Commission itself has acknowledged the lack of proof that bulk scanning of messages delivers better outcomes, raising hard questions about efficacy versus intrusion.

Procedural Passage Fuels Fears of Mission Creep and Elitism

The way the law passed has triggered anger and deep distrust across Europe and abroad. Reports show that 314 Members of European Parliament voted against the extension, with 276 voting in favor and 17 abstaining, yet the measure still went through because opponents failed to reach the absolute majority needed to actively block it. That procedural quirk means a controversial surveillance-friendly law survived even though more lawmakers opposed it than backed it, leading critics to call the move an “undemocratic procedural trick” that bypassed the spirit of parliamentary democracy.

Chat control is back again, despite rejection by the European Parliament.@RichardJSchenk says an accelerated procedure and the framing of child protection are being used to build the infrastructure for scanning private messages.

From our latest podcast. pic.twitter.com/EqS13miQ1D

— MCC Brussels (@MCC_Brussels) July 15, 2026

Privacy campaigners, technical experts, and civil liberties groups now warn that once a scanning infrastructure is normalized for one kind of crime, political pressure will grow to widen its use. They point to past European Union debates where “temporary” exceptions and targeted tools slowly expanded toward broader surveillance, and draw chilling parallels to historic secret police practices. For American conservatives watching from Trump’s second-term United States, the fight looks familiar: elites invoking “safety” to chip away at privacy, free speech, and basic constitutional-style protections, while regular citizens are told to trust the same bureaucracies that often fail them.