European Parliament Extends Mass Scanning of Private Messages Until 2028

The European Parliament extended a temporary exemption from ePrivacy rules that permits scanning of private messages for child sexual abuse material. The extension runs until 3 April 2028 while negotiations continue on a permanent framework. The measure, known as Chat Control 1.0, resurfaced after lawmakers rejected an extension in March.

European Parliament President Roberta Metsola sent the file to the Council in late June, citing a gap in online child protection. The Council returned the file to Parliament at the start of the summer recess.

A first reading produced 314 votes to reject the measure, 276 in favor, and 17 abstentions. An absolute majority of 360 votes was required to block it. The second reading fell short with 276 votes in favor of rejection, 286 against, and 30 abstentions, sending the amended text to the Council for final approval within three months.

The amended position includes a provision from the liberal RENEW group that would exclude end-to-end encrypted communications from the scanning requirement. The Council has previously indicated it may reject this change.

Hahn called the outcome a disgrace and said it opens the door for mass surveillance of private communications. Lyudmyla Kozlovska of the Open Dialogue Foundation said the vote reflects a pattern of normalizing privacy erosion across financial, travel, and communications data.

Member states have shown limited public debate on the file, with discussions typically handled by interior ministry officials. Privacy advocates, cybersecurity specialists, and human rights groups have voiced opposition to both the current extension and the proposed permanent rules.