EU restarts chat scanning rules but exempts encrypted messages

The European Parliament has passed interim rule to allow technology companies to voluntarily scan private communications until 2028

The European Parliament has passed interim rule to allow technology companies to voluntarily scan private communications for child sexual abuse material until 2028. The rule passed a new parliamentary amendment that restores voluntary chat scanning while protecting end-to-end encrypted communications.

The revised proposal has now been submitted to ministers of EU member states, who have three months to provide a formal response.

Cryptography Group warns that device-level scanning may reveal sensitive information

Cryptography Technology Group warns that device-level scanning may expose wallet credentials, security keys, and information about open source software developers.

However, lawmakers also passed an amendment to explicitly exclude messages protected by end-to-end encryption. The revised proposal will be transferred to the Council of the European Union for review.

On July 9, the European Parliament voted to restore a temporary legal framework called \"Chat Control 1.0\"(as critics called it). Previously, the rule expired in April this year while European institutions are still in ongoing negotiations on a permanent system.

According to official voting records, 314 MPs voted against the European Council\'s position, 276 MPs opposed veto the position, and 17 abstained. However, opponents need an absolute majority-361 votes-to block the proposal. As a result, the legislation was moved forward even though more members than supporters voted against the council\'s position.

The rule allows online service providers to voluntarily detect, remove and report material suspected of child sexual abuse. Proponents believe that this framework provides a legal basis for platforms to identify and report abusive content. At the same time, privacy groups believe extensive scanning could expose private communications of users who are not under investigation.

End-to-end encrypted chats are exempted

Parliament also passed an amendment that clearly stipulates that the scanning framework should not cover communications protected by end-to-end encryption. The encryption amendment received 369 votes in favor, 236 votes against and 6 abstentions.

End-to-end encryption technology prevents platforms and third parties from reading content while transmitting between message senders and recipients. According to the text passed by Parliament, the exemption applies to \"communications to which end-to-end encryption has been, has been, or will be applied.\"

MP Markeita Gregorova from the Pirate Party described the result as a \"bittersweet victory.\" In a Green Party/European Freedom Union statement, she said protecting encrypted communications had always been a priority, but \"unfortunately, voluntary mass scanning passed.\"

The revised proposal will be returned to EU member states. The Council can approve the changes proposed by Parliament, or it can reject and start a new round of negotiations.

Cryptocurrency industry worries about wallet security

The vote also attracted attention from the cryptocurrency industry, as wallet users rely on secure devices and encryption services to protect private keys, passwords and recovery phrases. Blockchain organizations have issued a warning that client scanning may bring new security risks.

The client tool checks messages, photos, or files on the device before encryption protection. The International Association for Trusted Blockchain Applications said such systems could expose wallet mnemonics, session keys and other sensitive data. Attackers could also target scanning software if the software gained widespread access to files stored on a user\'s device.

The group also questioned the possible impact on open source developers. Developers of wallets and decentralized apps may face additional compliance obligations, even if they do not control the network on which their software runs.

Ethereum co-founder Vitalik Buterin also criticized the proposal before the vote. \"They are trying to impose chat controls again,\" he wrote.

Negotiations on permanent chat controls continue

This interim framework is separate from the proposed permanent regulation known as \"Chat Control 2.0.\" Negotiations on the broader law are expected to resume in September. Lawmakers remain divided on whether detection measures should target suspicious users or should be widely used on all communication services. They are also debating how authorities can crack down on abusive content while weakening encryption.

Currently, parliamentary amendments protect services that use end-to-end encryption from temporary scanning frameworks. Service providers can still conduct voluntary inspections of communications that are not subject to this protective measure. However, the law has not yet completed the EU legislative process. The Council\'s response will determine whether the extension clause takes effect in an amended form or needs to be returned for further discussion.