EU Lawmakers Voted Against Message Scans, Big Tech to Proceed Anyway

The European Parliament has controversially reinstated legislation allowing major technology companies, including Meta, Google, and Microsoft, to voluntarily scan users’ private messages for child sexual abuse material (CSAM). This decision, which revives permissions critics dub "Chat Control," passed despite a majority of lawmakers voting against it, due to a procedural maneuver that bypassed typical legislative safeguards.

On Thursday, the Parliament voted on an "urgent procedure" proposed by the European People's Party (EPP). This fast-tracked process skips preliminary committee debates where amendments are usually introduced. Crucially, for the regulation to be blocked, an absolute majority of 361 Members of European Parliament (MEPs) had to vote against it. While more MEPs voted in opposition to the measure than in favor, they fell short of this demanding threshold by 47 votes, thereby allowing the extension to pass.

The ruling means that tech companies will retain the right to scan private text, email, and social media messages for CSAM detection. This legal basis is now secured until 2028, or until a more permanent legislative framework, already in discussions and also contentious, is enacted.

Driving the push for reinstatement, the EPP, the Parliament’s largest political group, argued that these voluntary detection activities are vital for identifying and rescuing victims of online child sexual abuse. A prior law had expired in April, creating what proponents saw as a critical gap in child protection. EPP vice-chair Tomas Tobé emphasized the urgency, stating earlier in the week, "We cannot go to the summer recess knowing that our children are not protected."

However, the implications for digital privacy have drawn fierce opposition from other political parties and civil rights organizations. Critics argue that the legislation enables a broad, suspicionless form of surveillance that undermines fundamental rights. Simeon de Brouwer, a policy adviser at the Brussels-based advocacy group European Digital Rights, warned of the significant privacy erosion. "It will mean that private companies may deny your right to have confidential digital conversations," de Brouwer told WIRED. "They could, if they want to, read every message you write, every email you send, every picture you share."

Former MEP and civil rights activist Patrick Breyer publicly denounced the ruling as a "farce" that "damages democracy." In a blog post, Breyer asserted, "Our children are the real losers in this undemocratic process. Trying to protect children with suspicionless mass surveillance is like frantically mopping the floor while the faucet is still running. Blanket chat control is just as unacceptable as indiscriminately opening everyone’s physical mail."

It is important to note that end-to-end encrypted communications, such as those exchanged on platforms like WhatsApp and Signal, remain exempt from this scanning. The temporary extension provides a legal bridge while the European Union continues to deliberate on comprehensive, long-term legislation concerning online child safety and privacy.

FAQ

Q: What is the "Chat Control" bill?

A: "Chat Control" is the nickname given by critics to a European legislative proposal that allows tech companies to voluntarily scan users' private messages, emails, and social media content for child sexual abuse material (CSAM).

Q: Why did the legislation pass if a majority of European lawmakers voted against it?

A: The legislation passed due to a procedural maneuver called an "urgent procedure." This required an absolute majority of 361 MEPs to vote against the measure for it to fail. While more members voted against it than for it, they fell short of this specific absolute majority by 47 votes.

Q: Which types of messages are affected, and are any exempt?

A: The legislation allows companies like Meta, Google, and Microsoft to scan private text, email, and social media messages. However, end-to-end encrypted chats, such as those on WhatsApp and Signal, remain explicitly exempt from this scanning.