European Union to vote on extension of controversial 'Chat Control' bill... At a crossroads between child protection and privacy

On Thursday, July 9, 2026, European Union (EU) lawmakers are scheduled to vote on a significant extension of the Child Sexual Abuse Regulation (CSAR), widely known as 'Chat Control.' This vote is seen as a watershed moment in a years-long legislative battle between mandatory measures for child safety and the fundamental right to end-to-end encryption (E2EE).

This vote is evaluated as an attempt to reactivate regulations that have faced significant political hurdles. Within the EU, the justification of child protection and concerns over mass surveillance are in sharp conflict, and the outcome of the vote is expected to determine the direction of European digital policy.

The primary objective of CSAR is to detect, report, and remove illegal Child Sexual Abuse Material (CSAM) from online platforms. However, critics have strongly opposed it, labeling it 'Chat Control' due to its potential to peer into even encrypted messages.

This bill risks turning Europe into a surveillance state and will set a dangerous precedent for digital rights worldwide. Undermining end-to-end encryption ultimately threatens the security of all citizens.

During the first half of 2026, this bill passed through several critical junctures. On March 11, the European Parliament passed a proposal to extend the interim regulation until 2027 while limiting the scope of scanning, followed by discussions on the final draft in the Council working group on June 10.

2026 Legislative Timeline and Key Progress

The key schedules carried out this year suggest that the July 9 vote is not a mere formality. At each stage, the technical feasibility debate over whether illegal content can be filtered while maintaining the integrity of encryption technology has been reignited.

• March 11, 2026: European Parliament passes extension of interim regulation to 2027 and scanning restrictions
• June 10, 2026: Council Law Enforcement Working Party discusses final draft of 'Chat Control 2.0'
• June 29, 2026: 5th final negotiation held and July 9 voting schedule confirmed

In particular, the 5th final negotiation held on June 29, 2026, was the final stage for coordinating the positions of each stakeholder ahead of this vote. In this process, technical conflicts surrounding the introduction of client-side scanning remained unresolved and were passed on to tomorrow's vote.

From a technical perspective, the biggest issue is that vulnerabilities or backdoors must be installed on the device itself to scan encrypted messages. Security experts warn that such measures pose systemic risks that could be exploited by malicious hackers or state agencies, ultimately weakening the digital security of all users.

Opinions are also divided within the EU Council. An amendment proposed by Denmark suggested a compromise that limits scanning targets to images and links only, excluding text messages. Some member states, including Latvia, Lithuania, Luxembourg, and Malta, have supported this proposal and maintained their stance in favor since late 2025.

The risk of false positives in automated scanning systems is also a factor that cannot be ignored. The prevailing view in civil society is that there is a high possibility of innocent users' privacy being violated, and that the weakening of security across communication platforms could ultimately threaten the digital safety of all users.

The direction of the trilogue between the EU Commission, Parliament, and Council will be determined by the results of tomorrow's vote. With the interim regulation already extended until 2027, this decision will be a milestone in determining whether Europe will accept technical surveillance or adhere to the principles of privacy protection.

In conclusion, the vote on July 9, 2026, could serve as an opportunity to rewrite the definition of fundamental rights in the digital age, going beyond a simple extension of regulations. The world's attention is focused on the impact Europe's decision will have on the global encryption market and privacy standards.