Chat Control: voluntary scanning is back, encrypted chats stay out

The temporary scanning rules returned on 31 July, excluding end-to-end encrypted apps; the permanent law is still disputed.

The temporary EU rule that lets apps voluntarily scan messages for child sexual abuse material expired on 3 April 2026. On 9 July Parliament did not reject its revival (314 votes to reject; 360 were needed) but excluded end-to-end encrypted communications such as WhatsApp and Signal. The Council accepted Parliament’s changes on 23 July, and Regulation (EU) 2026/1881 has applied since 31 July 2026, until 3 April 2028. The permanent “Chat Control” law (the CSA Regulation) is still being negotiated, and mandatory detection orders remain the main point of dispute.

For youNo EU law forces apps to scan your private messages, and the temporary rule does not cover encrypted chats.

Next: Negotiations on the permanent law continue under the Irish Council presidency; there was no agreement as of 29 September 2026. The temporary rule runs until 3 April 2028.

Verified against the sources above on 29 September 2026. Plain-language summary — not the legal text and not legal advice.