EU Governments Clear the Final Hurdle on Chat Control

The long-running fight over so-called chat control has reached another turning point. According to heise online, EU member states have reached agreement on extending the exception that allows certain messaging and email providers to voluntarily scan private communications for child sexual abuse material (CSAM). Crucially, this new agreement incorporates amendments previously introduced by the European Parliament, removing what had been the last major obstacle to finalizing the extension.

For readers who have followed this story, the announcement is less a sudden twist than the next chapter in a saga that has stretched across much of 2026. What makes this development notable is not that an extension is happening (that outcome has looked likely for months) but that the Council of the EU, representing member state governments, has now aligned itself with the changes MEPs demanded before they would sign off.

How We Got Here

To understand why this agreement matters, it helps to recall the bumpy path that preceded it. The original chat control exception, often referred to as Chat Control 1.0, technically expired on April 4, 2026, after the Council and Parliament failed to agree on renewal terms. That lapse briefly ended the legal basis for platforms to scan messages for CSAM on a voluntary basis, as detailed in coverage of how the EU revived Chat Control 1.0 in a surprise July vote.

That July 9 vote did more than restore the expired framework. Parliament also passed a broader update, dubbed Chat Control 2.0 by critics, that reignited debate over how far platforms should go in detecting illegal content. Our earlier reporting on the EU Parliament passing Chat Control 2.0 walked through what changed in that vote and why privacy advocates remained uneasy despite the outcome falling short of mandatory, indiscriminate scanning.

Since then, the question has been whether the Council would accept the conditions Parliament attached to any further extension. Those conditions have been a recurring sticking point throughout this process, as we outlined in our breakdown of what July's vote really changed for the rules governing message scanning. With member states now agreeing to Parliament's amendments, that impasse appears resolved, at least for now.

What the Amendments Change for Privacy

The practical effect of this agreement is that the voluntary scanning exception will continue rather than lapse again, but under terms shaped partly by Parliament rather than the Council alone. This distinction matters because throughout 2026, Parliament and the Council have repeatedly clashed over scope: how long any extension should last, what safeguards should accompany scanning, and whether the exception should remain voluntary rather than becoming a mandatory obligation for providers.

The article does not specify every detail of the amendments themselves, but the fact that Council negotiators accepted Parliament's input signals a shift toward compromise after months of back-and-forth votes, expirations, and revivals. For a fuller picture of what the underlying vote changed in practical terms, our explainer on what the July 9 vote means remains a useful reference point for understanding the mechanics of voluntary CSAM detection under EU law.

What This Means For You

If you use email or messaging services based in the EU, or services that operate under EU jurisdiction, this agreement means the current voluntary scanning framework will persist rather than disappear. Providers that already participate in CSAM detection can continue doing so under a legal exception to the ePrivacy rules, rather than facing a legal gray area every few months.

For privacy-conscious users, the key takeaway is that this remains a voluntary exception, not a blanket mandate forcing every provider to scan every message. However, the repeated extensions and near-lapses over the past year show that the underlying policy question, how to balance child safety online with communication privacy, is far from settled. Each extension buys time rather than resolving the debate permanently.

Staying Informed and Taking Action

This agreement among EU countries is unlikely to be the final word on chat control. The pattern throughout 2026 has been one of expirations, emergency votes, and renegotiated terms, and there is little reason to expect that pattern to stop now that an extension has been agreed.

A few practical steps for readers who want to stay ahead of this issue:

  • Keep track of which messaging and email providers you use and whether they participate in voluntary CSAM scanning.
  • Review the privacy policies of your communication apps periodically, since participation in scanning programs can change as EU rules evolve.
  • Follow ongoing chat control extension developments, since amendments and deadlines have shifted multiple times already in 2026 and are likely to shift again.

The chat control extension debate is a reminder that EU privacy law is being negotiated in real time, often through last-minute compromises. Staying informed is the simplest way to make sure your own communication choices match your privacy expectations.