The European Parliament has failed to block the EU's controversial 'Chat Control' regulation, after a vote to stop the interim rule fell short of the required 360-seat majority. While a majority of MEPs voted against the measure, the total was insufficient to trigger a formal halt, meaning the temporary scanning regime remains in effect for now.
The regulation, formally known as the Child Sexual Abuse Material (CSAM) proposal, obliges messaging services such as WhatsApp, Signal, and Telegram to scan users' private messages and photos for illegal content. Privacy advocates and tech companies have warned that the rules effectively break end-to-end encryption, creating a 'backdoor' that could be exploited by malicious actors. The interim version was introduced while the EU finalises a permanent framework.
For UK businesses and consumers, the development carries significant weight despite Brexit. Many UK-based tech firms that operate across Europe must comply with the regulation, and the UK's own Online Safety Act already contains provisions for scanning private messages. The Information Commissioner's Office (ICO) has previously warned that mass surveillance of communications could breach data protection laws and erode public trust in digital services.
Dr. Eleanor Shaw, a cybersecurity researcher at the University of Cambridge, described the vote as a 'missed opportunity' to protect privacy. 'The idea of scanning every message is technically flawed and legally dangerous,' she said. 'If the EU pushes ahead with a permanent version, we could see a fragmentation of the internet, with some platforms refusing to operate in Europe altogether. That would harm consumers and stifle innovation.'
The EU is now expected to continue work on a permanent Chat Control regulation, with a review of the interim rule anticipated. UK digital rights groups have called on the government to resist similar measures, arguing that the approach risks normalising mass surveillance. Meanwhile, messaging apps are under growing pressure to either comply with the scanning requirements or risk being blocked in the EU market.