Full Breakdown
European Parliament Tightens “Chat-Control” Rules, Excluding Encrypted Apps
7/10/2026, 4:53:39 PM
Core Amendment Adopted
On 9 July 2026 the European Parliament approved two amendments that remove end-to-end-encrypted services such as WhatsApp and Messenger from a temporary EU scheme that permits electronic-communication providers to implement voluntary measures for detecting child sexual abuse material (CSAM). The amendments passed with 369 and 362 votes respectively, narrowly surpassing the absolute-majority threshold required to alter the bill.
Background and Legislative Context
The “chat-control” regime, criticised for its privacy impact, was introduced as a temporary derogation from EU e-privacy rules to allow providers to scan messages for CSAM. The European Commission has proposed extending the scheme until 2028, a move that must be endorsed by both the Parliament and member-state governments. The original temporary measure expired on 3 April 2026 after the Parliament voted against its extension earlier in the year. Nevertheless, EU governments revived the proposal after Parliament President Roberta Metsola urged its continuation.
Political Dynamics and Key Figures
The amendments were championed by an unusual coalition of liberal, radical-left and far-right MEPs, outnumbering the two largest groups: the centre-right European People’s Party (EPP) and the centre-left Socialists and Democrats. Birgit Sippel, the German rapporteur for the file, voted in favour of the changes, playing a decisive role in their adoption. The EPP had initially sought to pass the extension without alteration using a rarely employed procedure that requires an absolute majority of at least 361 votes to reject or amend a bill.
Criticism and Opposition
Privacy advocates label the temporary framework “chat control,” arguing that any mandated scanning threatens the confidentiality guaranteed by end-to-end encryption. Supporters maintain that the measures are essential to protect minors and curb the spread of child pornography. The narrow vote margins reveal deep divisions within the Parliament over balancing child-protection goals with fundamental privacy rights.
Implications and Next Steps
With the amendments in place, encrypted services will no longer be compelled to adopt voluntary CSAM-detection tools that deviate from EU e-privacy standards. The proposed extension of the overall regime to 2028 now requires renewed approval from the European Parliament and the member states, setting the stage for further negotiations on how the EU will address online child-abuse while respecting encryption safeguards.