On April 3rd 2026, technology companies operating in the European Union will lose the legal right to detect child sexual abuse material (CSAM) on their own platforms.
Not because anyone decided children don't matter. Because a temporary law, the Interim Regulation, is expiring, and politicians have not agreed on a permanent replacement.
What Is the Interim Regulation?
Since 2021, the EU Interim Regulation has allowed platforms to voluntarily scan for known CSAM using established technologies like hash-matching and PhotoDNA. These systems compare uploaded content against databases of previously identified abuse imagery without reading private messages or surveilling users.
Without this legal basis, platforms that continue scanning could face legal action under the ePrivacy Directive, which prohibits interference with electronic communications.
What Happens on April 3rd?
Unless the European Parliament votes to extend the Interim Regulation, the following will occur:
- Hash-matching systems go dark. Platforms like Meta, Google, and Microsoft will no longer have legal cover to scan for known CSAM.
- Reporting drops. The Internet Watch Foundation (IWF) and the National Center for Missing and Exploited Children (NCMEC) will see a dramatic reduction in referrals from EU-based services.
- Abusers gain ground. According to IWF research, a third of offenders say that the risk of detection has deterred them. Remove that risk, and the deterrent vanishes.
As Dan Sexton from the Internet Watch Foundation writes: the systems that have been making it harder for abusers to access this material are about to become illegal.
The Privacy vs Safety False Dichotomy
Critics of CSAM scanning often frame it as a surveillance issue. But as Sexton points out: Child safety technology cannot be used for surveillance any more than anti-virus scanners or spam filters.
Hash-matching compares content against a fixed database of known illegal material. It does not read messages. It does not profile users. It does not enable mass surveillance. It is a targeted, proportionate response to a specific and serious crime.
How This Relates to Behavioural Detection
At Tuteliq, we build behavioural detection technology that analyses how conversations evolve to identify grooming, coercive control, and exploitation patterns before harm occurs.
Behavioural detection and hash-matching are complementary layers of child safety. Hash-matching catches known material. Behavioural detection catches the predatory behaviour that precedes the creation of new material. Removing the legal basis for one undermines the entire ecosystem.
What Needs to Happen
- MEPs must vote to extend the Interim Regulation before it expires on April 3rd.
- The EU must finalize a permanent framework that balances privacy with child protection.
- The tech industry must be vocal. Silence from platforms is complicity.
What You Can Do
- If you are an MEP: Vote to extend the Interim Regulation this Thursday.
- If you are in the tech industry: Share this article and advocate for sensible regulation.
- If you are a parent: Contact your MEP and tell them this matters.
- If you are a platform operator: Review your current detection capabilities and ensure you are prepared for the legal landscape shift.
The clock is ticking. Child safety technology that has been operational for years is about to be switched off, not by design, but by legislative inaction.
This is not a privacy vs safety debate. It is a question of whether Europe will choose to protect its most vulnerable citizens.