Protecting or invading your privacy?

The European Union has extended temporary rules allowing online platforms to voluntarily identify content involving child sexual abuse until April 2028. These measures aim to close legal gaps while reigniting debates over future regulations that could significantly impact digital privacy. The focus of public attention, however, remains on the controversial “Chat Control 2.0” proposal, which would require mandatory review of private messages before they are sent and could profoundly alter encrypted communication practices. The initial version of these rules was introduced in 2021, granting service providers the ability to voluntarily scan content for known child sexual abuse material. This framework was set to expire on April 3, but its future remained uncertain. In March, the European Parliament’s Committee on Civil Liberties, Justice and Home Affairs rejected the extension, only for the full parliament to approve it on July 9 through expedited procedures. Despite opposition, the temporary rules will remain in effect for nearly two more years, until late 2028. The more contentious long-term regulation, known as “Chat Control 2.0,” has sparked widespread debate. This proposal would mandate risk assessments for content and, in certain cases, require disclosure of illegal material. One of its most controversial provisions allows for the inspection of users' private messages, including encrypted communications. Earlier versions of the proposal had even suggested scanning encrypted messaging, raising concerns among privacy advocates and encryption service providers. Negotiations between the European Parliament, the Council of the EU, and the European Commission have been ongoing since December 2025, yet no agreement has been reached. A fifth round of talks held on June 29 ended without consensus due to disagreements over mandatory message inspections. Negotiators are expected to reconvene in September, with the outcome remaining unclear. The final decision on whether to implement such sweeping changes will depend on how these discussions unfold. Supporters of stricter legislation argue that stronger measures are essential to protect children from online exploitation. According to Europol data, over 20 million reports of suspected child sexual abuse were filed in 2024 alone, highlighting the scale of the issue. Advocates claim that mandatory content checks could help prevent harmful material from being shared or accessed by minors. On the other hand, privacy experts, human rights organizations, and encrypted communication providers warn that inspecting messages before encryption would weaken overall user privacy. Critics also highlight the risks of false positives and wrongful accusations resulting from automated content analysis. They argue that such measures could inadvertently harm innocent individuals or undermine trust in secure communication tools. Among the most vocal opponents is the Signal messaging app, whose leadership has repeatedly stated that the company would rather exit the European market than adopt a system for reviewing private messages. Other encryption-focused services have similarly expressed concern over the potential erosion of user privacy under the proposed framework. As the temporary rules remain in place until 2028, the path forward remains uncertain. The upcoming autumn negotiations will determine whether the EU can strike a balance between enhancing child protection and preserving digital privacy. The outcome of these discussions will shape the future of online communication in Europe, with far-reaching implications for both security and civil liberties.