EU parliament passes chat control, private scans allowed to 2028

The European Parliament passes chat control rules that let technology companies scan private messages for child sexual abuse material through 2028. EU lawmakers have again authorized proactive chat scanning for abuse content, but they exempted end-to-end encrypted communications from the requirement.

The decision lands in a long-running EU debate over how platforms detect illegal material without weakening privacy protections. For users of messaging apps, payment apps with chat features, and crypto communities that rely on encrypted channels, the split between scannable messages and exempt encrypted traffic is the line that matters most.

Key Takeaways

• EU lawmakers approved chat control measures allowing private chat scans until 2028.
• Tech firms may scan messages for child sexual abuse material under the framework.
• End-to-end encrypted messages are explicitly exempt from mandatory scanning.
• The vote revives a contested EU approach to balancing child safety and digital privacy.
• Fintech and crypto users should watch how platforms apply scanning outside encrypted channels.

What did the EU parliament pass?

According to reporting from CoinTelegraph, the European Parliament has passed legislation widely referred to as chat control. The framework permits technology companies to scan private chats for abuse material rather than leaving detection entirely to user reports or limited automated tools.

The policy is time-bound: scanning authority runs until 2028. That deadline gives platforms, regulators, and privacy advocates a fixed window to assess whether the approach works in practice.

Why does chat control matter for privacy and crypto?

Private messaging underpins far more than social chat. Trading groups, wallet support threads, and app-based payment conversations all sit on the same infrastructure as everyday messages. When lawmakers green-light proactive scanning, the operational question is where detection happens and what data leaves the device.

The exemption for end-to-end encrypted messages is central. Services that cannot read message contents remain outside mandatory scanning under this framework, which matters for users who treat encryption as a baseline security feature rather than a specialty setting.

For more on how regulation intersects with digital assets and platform policy, see our Fintech & Crypto Alerts coverage.

What is exempt from scanning under the new rules?

EU lawmakers drew a clear boundary: end-to-end encrypted communications are not subject to the same scanning requirements as other private chats. That distinction reflects a political compromise between child-safety advocates pushing for broader detection and privacy groups warning that blanket scanning could undermine secure communications.

Platforms that offer mixed modes—encrypted optional chats alongside standard messaging—will still need to interpret how the exemption applies product by product. The legislation sets the EU-level rule; implementation details will shape user experience.

What happens next through 2028?

With scanning permitted until 2028, the EU has bought time to test whether voluntary or mandated detection can reduce abuse material sharing without pushing users entirely into unregulated channels. Critics have long argued that scanning normalizes surveillance; supporters counter that manual reporting alone cannot keep pace with scale.

Tech firms operating in the EU now face renewed compliance questions: which message types qualify for scanning, how abuse detection is audited, and how the encrypted exemption is documented. Watchdogs and civil society groups are likely to scrutinize whether scanning stays narrowly targeted at abuse material.

CoinTelegraph reported the parliamentary approval in its coverage of the chat control vote. Further EU guidance and national implementation steps will determine how quickly platforms change their policies.

How should users read this decision?

If you rely on encrypted messaging, the exemption is the headline protection in this package. If you use non-encrypted in-app chat—for support, community coordination, or payments—the scanning allowance may affect what platforms can analyze automatically.

The vote does not by itself ban encryption or mandate backdoors, based on available reporting. It does signal that EU institutions remain willing to authorize proactive chat scanning when lawmakers believe abuse detection warrants it, while drawing a line at end-to-end encrypted content for now.