Privacy vs. child protection: EU’s “chat control” plans split member states
If there’s one thing all EU member states agree on, it’s that children need to be protected from sexual abuse. But the Commission’s plan of how to go about this with respect to abuse material online has led to strong divisions among the bloc’s 27 countries.
The EU’s Regulation to Prevent and Combat Child Sexual Abuse (CSAR), often referred to as the “child sexual abuse regulation” or “chat control”, is at a pivotal stage in the legislative process – but seems to have hit a dead end due to fears of invasion of EU citizens’ digital privacy.
The regulation aims to establish a harmonised legal framework across the EU to detect, report, and remove child sexual abuse material (CSAM) online, replacing the current interim measures that allow voluntary detection by service providers.
A report by the UK-based Internet Watch Foundation found that 62 percent of the child sexual abuse material identified internationally last year was hosted on servers within the EU.
Proponents of CSAR stress that child pornography is a very serious crime. They say that data protection authorities would closely monitor the regulation’s implementation and point to successes over the last years in catching offenders due to voluntary CSAM detection.
It has to be agreed on by the European Parliament and the member states – and this is where the crux lies.
Despite several attempts by countries holding the EU Presidency over the years, the 27 members have not managed to agree to a deal. The latest attempt was made by the Danish Presidency last week, with the chat control aspect being a key sticking point.
The Danish Presidency said Monday that it was not yet at a stage to secure the necessary support for a vote in the Council of the EU. “That’s why we concluded that the discussions would be better to continue the weeks ahead bilaterally among countries and parties where we need to try to meet a compromise,” Justice Minister Peter Hummelgaard said, adding that Denmark had laid out a new compromise proposal.
What does the CSAR proposal entail?
The so-called chat control is based on the European Commission’s 2022 proposal aimed at combating child sexual abuse. According to the proposal, online service providers, including chat apps, social networks and data storage, would have a legal obligation to search the content of messages and stored files using algorithms. Service providers would have to notify the relevant authorities of materials related to child pornography or the abuse of minors and remove the content.
The Commission’s original proposal mandated that online service providers are to scan both encrypted and unencrypted private messages for CSAM material (“chat control”). Parliament proposed amendments aimed to protect encryption, scan public content and that online services have built-in features for child safety.
What was supposed to happen?
Originally introduced by the Commission in 2022, the European Parliament adopted its position in 2023. It focused on privacy protections and limiting the scope of scanning, especially in end-to-end encrypted environments. Since then, member states have tried (and failed) to reach an agreement.
The interim regulation allowing voluntary CSAM detection has been extended until April 3, 2026 to ensure continuity while the permanent regulation is being worked on.
Denmark had drafted the latest version of the proposal. It insisted that it includes necessary safeguards: Firstly, only images and links – not text messages – would be subject to scanning. Second, the system would only be activated following a decision by an independent judicial or administrative authority.
“We have to be very clear: under this proposal, there is no general monitoring of online communications. There will be no such thing as ‘chat control’,” said European Commission spokesperson Markus Lammert. “This is about protecting our children against a terrible crime, a crime that happens more and more online.”
The Council was supposed to vote on the proposal on Tuesday with the idea for trilogue negotiations expected to begin in early 2026, meaning that it would be an informal interinstitutional discussion bringing together representatives of the European Parliament, the Council of the European Union and the European Commission. But with no compromise, the issue is back to bilateral discussions.
What’s the issue?
Some member states have expressed opposition to aspects of the proposal, even as its purpose is to protect children. The proposal also faced broad opposition from law enforcement, data protection authorities, civil society groups as well as tech majors who are the main messaging service providers. Child protection groups found themselves on both sides of the debate.
A main concern is that the legislation would open the door to mass surveillance. “This would spell the end of secrecy of correspondence, which is essential for whistleblowers,” German activist and former EU lawmaker Patrick Breyer said. Opponents have been flooding EU officials with messages aimed at swaying the debate as part of a campaign.
Elon Musk’s social media platform X branded the proposal “dangerous” and called on Germany and Poland, among the EU states most critical of the proposal, to continue to oppose it in order to “avoid mass surveillance of their citizens by governments and serious violations of user security by malicious actors”.
The messaging app Signal also criticised the proposal, calling it “the end of the right to privacy in Europe” and threatening to pack its bags and leave the EU if the proposal were to be approved.
Meta, the parent company of WhatsApp, said the proposal endangered privacy, freedom and digital safety.
Denmark’s Justice Minister Hummelgaard stressed at a press conference on Monday: “Much of the narrative has also been built up on an idea that the EU bodies or even national bodies would be able to conduct surveillance of private chats and that’s not the case. The case has been that we would like to oblige private companies, private platforms of taking a responsibility to limit the levels of enormous sharing of child sexual abuse materials.”
Berlin says “Nein”
A lot hinged on Germany. Without it there was no majority in the council, under the EU’s qualified majority voting rules. But Germany hit the brakes and said it would not have approved the proposal in a vote. “Unwarranted chat monitoring must be taboo in a constitutional state,” said Minister of Justice Stefanie Hubig.
In the Council of Member States, the approval of 15 of the 27 EU states, which together represent at least 65 per cent of the total population of the EU, is ultimately required for the regulation to be adopted.
Germany’s governing coalition parties are opposed to indiscriminate chat control. “That would be like opening all letters as a precautionary measure to see if there is anything illegal in them,” said parliamentary faction leader Jens Spahn of the conservative CDU. “That is not acceptable, and we will not allow it.”
The Polish Ministry of Digital Affairs stated that Poland defends internet users’ privacy and opposes the mass scanning of private correspondence. At the same time, it supports the introduction of measures within the European Union that will enable effective action against CSAM.
Polish representatives have repeatedly emphasised the need to maintain a balance between effectively combating the dissemination of CSAM and protecting users’ fundamental rights, such as the right to privacy and online security (including the protection of end-to-end encryption integrity).
Slovenia does not support the current version of the EU’s chat control proposal, the Interior Ministry said at the beginning of October. Slovenia considers the fight against sexual exploitation and abuse of children a priority, but at the same time advocates respect for fundamental human rights, including the right to privacy and personal data protection.
Digital Transformation Minister Ksenija Klampfer considers the proposal to be a disproportionate measure. “We must absolutely ensure the protection of children with all possible measures. But to monitor the messages of all citizens merely on the probability of abuse is problematic and constitutes a disproportionate intrusion into the privacy of communication,” Klampfer said.
The Czech Republic had initially planned to abstain, but positions have hardened: “I am glad that we have come to this change of position because I believe that we must protect the privacy and freedom of every citizen,” Prime Minister Petr Fiala said back in September. “From the beginning, we did not support this plan. However, the proposal has undergone some changes over the last while, it is becoming an urgent vote. For this reason, it has also been reflected in the change of the Czech Republic’s position,” he added.
In Portugal, the government considers it essential to combat child sexual abuse, but stresses that rights such as privacy should not be unjustifiably curtailed in the European chat control proposal, an official source from the Ministry of Justice told news agency Lusa. Portugal therefore advocates cautious involvement and internal political debate on the subject.
Spain says it has always supported all attempts to reach an agreement and supports the proposal of the Danish Presidency. For Spain, providing answers to victims is essential. The country is concerned about data from NGOs and institutions, which point to an increase in this type of content on the internet, and argues that more tools are needed to combat it. It also calls for access to data to be provided with full guarantees and in compliance with fundamental rights.
Other countries said to prefer stricter measures – or being on the fence – include France, Denmark and Sweden.
The Belgian government has not yet taken a position on the new proposal on chat control. However, during a debate in the federal parliament last week, no party appeared to be in favour of the proposal. Minister of the Interior Bernard Quintin emphasised that there must be a balance between protecting privacy on the one hand and combating the dissemination of such images on the other. “A solution must be balanced and proportionate,” he said.
With debates between member states and within governments and societies set to continue, child protection activists warn that while this can is kicked down the road, children remain at risk: According to Children protection group Eurochild, over 100 million images or videos of children being sexually abused were found online in 2023 alone – that’s roughly 270,000 every single day.
This article is an enr Key Story. The content is based on news by agencies participating in the enr.
