What Happened to EU Parliament Rejects Extension of 'Chat Control' Mass Surveillance Proposal?

The 'Chat Control' proposal, officially known as the Child Sexual Abuse Regulation (CSAR) or the Regulation to Prevent and Combat Child Sexual Abuse Online, has been a highly contentious legislative initiative within the European Union. Its aim is to combat the spread of Child Sexual Abuse Material (CSAM) and child solicitation online. The debate has largely centered on balancing child protection with fundamental rights to privacy and the confidentiality of digital communications, particularly concerning end-to-end encrypted services.

Initially, a temporary derogation from the ePrivacy Directive, often dubbed 'Chat Control 1.0,' was introduced in 2021 (Regulation 2021/1232) to allow online service providers to voluntarily detect and report CSAM. This interim measure was repeatedly extended, with the latest extension set to expire on April 3, 2026. The European Commission, along with some Member States and child protection organizations, advocated for its extension, arguing it was crucial for identifying victims and perpetrators.

However, privacy advocates, civil society groups, and a significant portion of the European Parliament strongly opposed indiscriminate mass scanning, citing concerns about undermining end-to-end encryption, high rates of false positives, and the potential for widespread surveillance. They argued that such measures are disproportionate and ineffective, often overwhelming law enforcement with irrelevant data.

In March 2026, the legislative process reached a critical juncture. On March 11, 2026, the European Parliament initially voted to extend the temporary derogation until August 2027, but with strict limitations, emphasizing that detection measures must be proportionate, targeted, and should not apply to end-to-end encrypted communications. However, subsequent trilogue negotiations between the Parliament, the Council of the EU, and the European Commission to reconcile their differing positions collapsed. The Council was criticized for its 'lack of flexibility' in accepting the Parliament's privacy safeguards.

This breakdown led to a dramatic plenary vote on March 26, 2026, where the European Parliament ultimately rejected the Commission's proposal to extend the temporary regulation. The vote was close, with 311 legislators against the extension, 228 in favor, and 92 abstentions. This rejection means that from April 4, 2026, the legal basis for voluntary indiscriminate scanning of private messages by platforms in the EU will cease to exist, effectively ending 'Chat Control 1.0'.

While this is hailed as a major victory for digital privacy, the broader battle over 'Chat Control' is far from over. Negotiations for the permanent Child Sexual Abuse Regulation (CSAR), or 'Chat Control 2.0,' are continuing under intense pressure. Critics warn that this 'Chat Control 2.0' could introduce mandatory age verification for messaging services and app stores, potentially making anonymous communication impossible and posing new threats to digital liberties. The current status as of March 27, 2026, is that the temporary voluntary scanning will end on April 3, 2026, creating a legal vacuum, while the future of a permanent, comprehensive regulation remains subject to ongoing and highly contentious negotiations.