Overview
- The European Parliament voted on July 9, 2026 to adopt an amended position that effectively reinstates the 2021 ePrivacy derogation known as Chat Control 1.0 and forwarded that text to the Council of the European Union for approval.
- Procedural rules required an absolute majority to reject the Council position so the motion advanced despite 314 MEPs voting against it and 276 in favour, a result critics say reflects an unusual and contested fast‑track process.
- Parliament added a clear exemption that excludes communications protected by end‑to‑end encryption from the scanning measures, a change supporters say protects secure services and opponents call largely symbolic since encrypted services were not scanning anyway.
- The Council has three months to accept or reject Parliament’s amendments and if it rejects any the file will enter conciliation, while permanent negotiations on a broader CSAM regulation known as Chat Control 2.0 are set to resume in September 2026.
- Privacy advocates, security experts and crypto groups warn the revived temporary regime keeps pressure on platforms to scan unencrypted private messages, risks client‑side or device scanning that could expose keys or personal data, and prolongs legal uncertainty for users and developers.