EU approves Chat Control policy

Summary

The EU Council reached an agreement on the Child Sexual Abuse Regulation Voluntary chat scanning remains in the bill despite privacy backlashThe Council now prepares to start negotiations with the ParliamentThe EU Council has finally reached an agreement on the controversial Child Sexual Abuse Regulation (CSAR) after more than three years of failed attempts.Nicknamed Chat Control by its critics, the agreement has kept cryptographers, technologists, encrypted service providers, and privacy experts alike in turmoil since its inception.Presidency after presidency, the bill has taken many shapes. But its most controversial feature is an obligation for all messaging service providers operating in the EU – including those using end-to-end-encryption – to scan their users' private chats on the lookout for child sexual abuse material (CSAM).At the beginning of the month, the Danish Presidency decided to change its approach with a new compromise text that makes the chat scanning voluntary, instead. That turned to be a winning move, with the proposal managing to reach an agreement in the Council on Wednesday, November 26, 2025.Privacy experts are unlikely to celebrate, though. The decision came a few days after a group of scientists wrote yet another open letter warning that the latest text still "brings high risks to society." That's after other privacy experts deemed the new proposal a "political deception" rather than an actual fix.The EU Council is now preparing to start negotiations with the European Parliament, hoping to agree on the final terms of the regulation.What we know about the Council agreement(Image credit: Pixabay)As per the EU Council announcement, the new law imposes a series of obligations on digital companies. Under the new rules, online service providers will be required to assess how their platforms could be misused and, based on the results, may need to "implement mitigating measures to counter that risk," the Council notes.The Council also introduces ...