News

EU Message-Scanning Push Reopens Privacy Fight

4 min read Comments
EU Message-Scanning Push Reopens Privacy Fight

Member states seek to revive a temporary child-safety tool after Parliament rejected the measure in March

EU governments have moved to revive a temporary legal regime that allows messaging providers to detect child sexual abuse material, reopening a sensitive dispute over child protection, private communications and the balance of power between the Council and the European Parliament.

EU ambassadors agreed on 26 June to advance a temporary extension of the framework, according to reporting by Euronews. The step comes less than three months after MEPs rejected prolonging the interim derogation from ePrivacy rules that had allowed some online services to scan communications voluntarily for child sexual abuse material.

The move is politically delicate because Parliament had already closed its first reading on the file. In March, MEPs voted 311 to 228, with 92 abstentions, against extending the derogation. Parliament said at the time that the temporary regulation would expire after 3 April 2026 because negotiations with the Council had not produced an agreement.

A child-safety gap, or a privacy red line?

The interim regime was created in 2021 as a bridge measure while the EU worked on permanent rules to prevent and combat child sexual abuse online. Its expiry left policymakers divided between those warning of a legal gap in child-protection efforts and those arguing that broad scanning powers risk normalising surveillance of private messages.

That tension has shadowed the wider EU debate for years. Child-safety advocates say platforms need legal certainty to detect and report abuse, including grooming and image-based exploitation. Digital-rights groups and privacy-minded lawmakers counter that scanning private communications, especially where end-to-end encryption is involved, can create serious risks for confidentiality, cybersecurity and fundamental rights.

The European Parliament’s own March statement stressed that its preferred approach had been narrower than the Commission’s proposal, seeking shorter duration and more targeted safeguards. The Parliament vote did not end the wider legislative process, but it hardened the institutional dispute over how far temporary detection powers should reach.

Permanent law still unresolved

The renewed Council push also lands as EU negotiators continue work on a longer-term regulation intended to replace temporary arrangements. That permanent framework is expected to address platform risk assessments, removal obligations, reporting systems and the role of a future EU centre on child sexual abuse.

But the permanent law has proved difficult precisely because it touches two urgent public interests at once: protecting children from serious abuse and protecting everyone’s right to private communication. Any durable compromise will need to show not only that detection measures can work, but that they are legal, targeted, proportionate and independently supervised.

The broader child-protection agenda is already moving on another track. Earlier this week, The European Times reported on a separate provisional EU agreement to strengthen child abuse laws, including provisions covering AI-generated abuse material, sextortion and longer limitation periods for survivors seeking justice.

That parallel file shows there is broad institutional agreement that Europe’s legal framework must adapt to digital forms of abuse. The harder question is whether private-message detection can be designed in a way that protects children without weakening the privacy and security guarantees relied upon by journalists, activists, lawyers, families and ordinary users.

Procedure now becomes part of the story

Because Parliament rejected the temporary extension in March, the latest Council move is not only a policy dispute but a procedural one. If member states press ahead, lawmakers are likely to scrutinise whether the Council is trying to revive a measure that Parliament has already politically refused.

For families affected by online abuse, the institutional friction may look remote from the urgency of removing harmful material and identifying offenders. For privacy advocates, however, the procedure matters because exceptional powers introduced as temporary tools can become entrenched before full safeguards are agreed.

The immediate next stage will depend on whether Council and Parliament can find a route back to negotiation without derailing the permanent CSAM regulation. Until then, the EU remains caught between two responsibilities it cannot credibly abandon: acting against the sexual exploitation of children and preserving the privacy protections that underpin democratic life online.