EU states agree on a position on draft child protection legislation without forcing Big Tech to find and remove CSAM, and will now negotiate with EU lawmakers
“The EU is stepping up its efforts to fight child sexual abuse. … Bluesky: Steve Peers / @stevepeers : EU Member States agree on negotiation position on CSA material online - will now negotiate with the European Parliament — www.consilium.europa.eu/en/press/ pre... Forums: Hacker News : EU Council approves Chat Control mandate for negotiation with Parliament r/europe : EU Member States reach agreement about revised Chat Control Lobsters : Chat Control: EU lawmakers finally agree on the voluntary scanning of your private chats
Context & Ripple Effects
The Council position is the latest turn in a long-running EU debate over the legal basis and limits of online CSAM detection. Earlier rules had constrained monitoring, before a temporary framework gave platforms room to scan without privacy-law liability in the EU's earlier three-year scanning allowance.
The negotiation mandate stops short of the proactive detection requirement contemplated in the leaked 2022 proposal, leaving the final balance between child-safety enforcement and private communications to the Council–Parliament talks.
First-order effects
- EU member states can begin formal negotiations with the European Parliament from a shared position, while large platforms avoid an immediate obligation to proactively detect and remove CSAM.
- The absence of a mandated detection duty preserves greater discretion for affected services over whether and how they conduct CSAM scanning during the legislative process.
Second-order effects
- The European Parliament becomes the decisive counterparty on whether tougher detection obligations return to the text; later coverage shows it advanced a scanning bill with an E2EE exemption, underscoring the remaining negotiating gap.
- Messaging and platform operators face continued policy uncertainty rather than a settled compliance target, complicating choices around moderation systems and encrypted-service design.
Third-order effects
- The debate is moving toward a more differentiated regulatory model: lawmakers may separate obligations for open platforms from treatment of end-to-end encrypted communications rather than impose one uniform scanning rule.
- If negotiations continue to trade off detection mandates against privacy protections, EU online-safety policy will increasingly be shaped by where governments draw the line between voluntary moderation and compelled technical monitoring.
The trend: This is part of a broader shift toward regulating the technical enforcement capacity of online services while testing the limits of privacy and encryption safeguards.