EU Parliament Backs Renewed Tech Rules on Child Safety, Exempts Encrypted Chats

European Union lawmakers on Thursday backed a proposal to reinstate temporary rules that permit large technology companies to voluntarily detect and remove child sexual abuse material (CSAM) from their platforms, a Reuters report confirmed. The reinstated measure, however, now includes a critical exemption for end-to-end encrypted communications, a move that highlights the ongoing tension between online safety and user privacy.

Details of the Proposal

The temporary rules, which were in place from 2021 until they expired in April of this year, provide an exemption from the EU's strict online privacy regulations for this specific purpose. The vote aims to bridge a legislative gap after EU countries and lawmakers failed to agree on a permanent law last month.

Under the proposal, companies like Alphabet's Google (GOOGL) and Meta Platforms (META) can continue using technology to scan for and report CSAM. However, lawmakers voted to explicitly exclude end-to-end encrypted services such as Meta's WhatsApp, Telegram, and Signal from these detection orders.

The Privacy vs. Safety Debate

The decision underscores a deep divide between online safety advocates and privacy activists, who have raised concerns about "mass scanning" creating a surveillance infrastructure that could breach user privacy.

Ad

"Protecting encryption was one of our priorities, and I am therefore glad that we managed to secure an absolute majority for an amendment that at least preserves encryption," said lawmaker Marketa Gregorova of the Pirate Party, according to Reuters. She added, "At the same time, however, voluntary mass scanning unfortunately passed."

Next Steps and Industry Impact

The European Parliament's position is not final. EU member countries now have a three-month period to decide whether to approve the changes. A permanent law, first proposed by the European Commission in 2022, has seen slow progress amid the contentious debate.

For the tech industry, this represents a mixed but largely favorable outcome in the short term. Major tech firms have lobbied against mandates that would require them to break or bypass encryption on messaging services. This temporary reinstatement without an encryption mandate reduces immediate regulatory pressure while the search for a permanent solution continues.