The EU Chat Control proposal status can be summed up in one line: after more than four years of negotiation, the plan to prevent child sexual abuse online through detection orders is still not settled. A recent legal-update article on the topic describes the proposal as controversial and long-running. For anyone who uses encrypted messaging apps, the unresolved questions matter as much as the headlines.

This post separates what is in place today from what is still being negotiated, and explains in plain language why privacy advocates and child-safety campaigners keep clashing over the same text.

Where the Chat Control negotiations stand now

The proposal, formally the Child Sexual Abuse Regulation (CSAR) and widely called Chat Control, has been under negotiation for over four years. Its central mechanism is the detection order: a legal instrument that would require a service to look for child sexual abuse material on its platform.

The process has not been a straight line. Our coverage of the latest trilogue outcome found that the most recent negotiating round ended without the mass scanning deal critics feared. That is not the same as a final resolution. It means the institutions have not agreed on a text, and the argument over how far detection orders should reach continues.

There has also been movement on a narrower track. We reported that the European Parliament adopted the so-called Chat Control 1.0 version on July 9, 2026. The 1.0 label refers to the interim framework, while the larger permanent regulation remains the subject of the long negotiation.

What detection orders mean for encrypted messaging

A detection order tells a provider to detect specific content. The technical difficulty is that end-to-end encrypted services are designed so that only the sender and recipient can read a message. The provider in the middle cannot see it.

That creates the core tension. For a provider to comply with an order on an encrypted service, critics argue, content would have to be checked on the device before it is encrypted. Opponents say this weakens the privacy guarantee that encryption is meant to provide. Supporters respond that the goal is protecting children and that investigators need effective tools. Both positions are sincere, and that is why the talks have dragged on.

Two points are worth keeping in mind:

  • The scope of a detection order is the key variable. A narrowly targeted order and a broad, general one have very different consequences for ordinary users.
  • The technical method matters as much as the legal wording. A rule that sounds limited on paper can behave differently once it is built into software.

The public mood is part of the story too. We covered how the Chat Control debate resurfaced in a Euronews poll, a sign that the question of scanning private messages keeps drawing attention well beyond Brussels.

Voluntary scanning versus mandatory scanning: the current rules

It helps to distinguish two things that often get blended together.

Voluntary scanning is when a messaging service chooses to scan for abuse material under a temporary EU rule. Member states agreed to reactivate that arrangement, and we reported that the chat-scanning exemption was reinstated through April 2028. This is what is in effect while the bigger proposal is debated.

Mandatory scanning would come through detection orders under the permanent regulation. This is the part that remains under negotiation, and it is where most of the privacy concern sits.

So, put simply: voluntary scanning has a legal footing for now, and mandatory detection orders are not yet agreed. Anyone telling you that either side has already won is getting ahead of the facts.

What this means for you

If you use encrypted messaging, nothing about your apps changed overnight because of the status of these talks. The risk lies in the long run: the final wording of the regulation could determine whether providers are ever required to scan content on encrypted services.

It also means the debate is not purely technical. It is a question of how a society balances child protection against private communication, and the outcome will be set by votes in the Council and Parliament, not by software updates.

What privacy-conscious users can do while talks continue

  • Stay informed from primary updates. Follow negotiation outcomes rather than social media summaries, which often overstate or understate what has been agreed.
  • Check your apps' settings and policies. Know which services you use and what they say about scanning, particularly given the voluntary-scanning exemption.
  • Keep your devices and apps updated. Good security hygiene protects you whatever the legal outcome.
  • Engage with your representatives. If you live in the EU, Council positions and Parliament votes are shaped by public input.
  • Be skeptical of absolute claims. Both "mass surveillance is coming tomorrow" and "nothing is at stake" miss the nuance.

Follow the next steps

The EU Chat Control proposal status will keep changing as negotiators return to the table. To keep up, read our report on the trilogue outcome and our explainer on the voluntary-scanning exemption, and watch for upcoming Council and Parliament votes. Those are the moments when this long-running debate will move from discussion to decision.