What changed

P10_TA(2026)0070

P10_TA(2026)0095

Amending Regulation (EU) 2021/1232 as regards the extension of its period of application

PE784.310

Amendments adopted by the European Parliament onlegislative 11resolution of 26 March 2026 on the proposal for a regulation of the European Parliament and of the Council amending Regulation (EU) 2021/1232 as regards the extension of its period of application (COM(2025)0797 – C10-0370/2025 – 2025/0429(COD))

(Ordinary legislative procedure: first reading)

Amendment 1

– having regard to the Commission proposal to Parliament and the Council (COM(2025)0797),

Proposal for a regulation

– having regard to Article 294(2) and Article 16(2) and Article 114(1) of the Treaty on the Functioning of the European Union, pursuant to which the Commission submitted the proposal to Parliament (C100370/2025),

Article -1 (new)

– having regard to Article 294(3) of the Treaty on the Functioning of the European Union,

Regulation (EU) 2021/1232

– having regard to the opinion of the European Economic and Social Committee of 21 January 2026,

Article 3 - paragraph 1 - point a

– having regard to Rule 60 of its Rules of Procedure,

Present text

– having regard to the report of the Committee on Civil Liberties, Justice and Home Affairs (A10-0040/2026),

Amendment

1. Rejects the Commission proposal;

Article -1

2. Calls on the Commission to withdraw its proposal;

In Article 3(1) of Regulation (EU) 2021/1232, point (a) is replaced by the following:

3. Instructs its President to forward its position to the Council, the Commission and the national parliaments.

(a) the processing is:

(a) the processing is:

(i) strictly necessary for the use of specific technology for the sole purpose of detecting and removing online child sexual abuse material and reporting it to law enforcement authorities and to organisations acting in the public interest against child sexual abuse and of detecting solicitation of children and reporting it to law enforcement authorities or organisations acting in the public interest against child sexual abuse;

(i) strictly necessary for the use of specific technology for the sole purpose of detecting and removing known online child sexual abuse material and reporting it to law enforcement authorities and to organisations acting in the public interest against child sexual abuse;

(ii) proportionate and limited to technologies used by providers for the purpose set out in point (i);

(ii) proportionate and limited to technologies used by providers for the purpose set out in point (i);

(iii) limited to content data and related traffic data that are strictly necessary for the purpose set out in point (i);

(iii) limited to content data that are strictly necessary for the purpose set out in point (i);

(iv) limited to what is strictly necessary for the purpose set out in point (i);

(iv) limited to what is strictly necessary for the purpose set out in point (i);

(v) not applied to interpersonal communications to which end-to-end encryption is, has been or will be applied;

Amendment 5

Proposal for a regulation

Article -1 a (new)

Regulation (EU) 2021/1232

Article 3 – paragraph 1 – point a – point i a (new)

Present text

Amendment

Article -1a

In Article 3(1), point (a), of Regulation (EU) 2021/1232, the following point is inserted:

“(ia) targeted, specified and limited to individual users, a specific group of users, either as such or as subscribers to a specific channel of communication, in respect of whom there are reasonable grounds of suspicion for a link, even an indirect one, with child sexual abuse material, and which have been identified by the competent judicial authority;”

Amendment 2

Proposal for a regulation

Article -1 b (new)

Regulation (EU) 2021/1232

Article 3 - paragraph 1 - point b

Present text

Amendment

Article -1b

In Article 3(1) of Regulation (EU) 2021/1232, point (b) is replaced by the following:

(b) the technologies used for the purpose set out in point (a)(i) of this paragraph are in accordance with the state of the art in the industry and are the least privacy-intrusive, including with regard to the principle of data protection by design and by default laid down in Article 25 of Regulation (EU) 2016/679 and, to the extent that they are used to scan text in communications, they are not able to deduce the substance of the content of the communications but are solely able to detect patterns which point to possible online child sexual abuse;

(b) the technologies used for the purpose set out in point (a)(i) of this paragraph are in accordance with the state of the art in the industry and are the least privacy-intrusive, including with regard to the principle of data protection by design and by default laid down in Article 25 of Regulation (EU) 2016/679 and, to the extent that they are used to scan text in communications, they are not able to deduce the substance of the content of the communications but are solely able to detect patterns which point to possible online child sexual abuse, and, where such technologies are used for the detection of solicitation of children or previously unidentified online child sexual abuse material, such use shall be limited to cases where the provider has received a concrete report or notification from a user, a trusted flagger, or an organisation acting in the public interest against child sexual abuse concerning a specific communication, account or interaction indicating a reasonable suspicion of online child sexual abuse, and the detection shall be strictly limited to what is necessary in relation to that reported case.

Amendment 3

Proposal for a regulation

Article 1 – paragraph 1

Regulation (EU) 2021/1232

Article 10 - second subparagraph

Text proposed by the Commission

Amendment

It shall apply until 3 April 2028.

It shall apply until 3 August 2027.