EU Parliament Blocks Extension of Mass Chat Scanning Program

The European Parliament has voted not to prolong an interim derogation from e-Privacy rules that allowed service providers to voluntarily scan private communications for child sexual abuse material. The decision deals a significant blow to the practice of mass surveillance in the European Union. The temporary legal exemption, which had allowed companies to scan messages without explicit user consent, has now expired. Under EU law, general and indiscriminate scanning of private communications is not permitted without specific legal basis. However, privacy advocates caution that the fight is not over. Google, Meta, Microsoft, and Snap have signaled their intent to continue voluntary scanning activities. The companies issued a joint statement reaffirming their commitment to child safety measures, though it remains unclear whether this includes continued scanning of private communications. The broader "Chat Control" proposal for mandatory detection of child abuse material remains under negotiation. The proposal has shifted focus toward risk mitigation measures such as age verification, which critics argue could still result in widespread surveillance if adopted as compliance requirements. The Electronic Frontier Foundation called the expired exception a victory but warned that the zombie proposal continues to resurface in different forms and must be monitored to prevent backdoor surveillance measures.