Chat Control 1.0 vs 2.0: The Difference, Explained
The nickname 'Chat Control' covers two separate EU laws that are often confused. One is already in force and voluntary; the other is still being negotiated and could become mandatory. Here is the difference, row by row.
Current status
Last verified: 2026-09-30- Chat Control 1.0 (Regulation (EU) 2026/1881): in force since 31 July 2026 — voluntary scanning, expires 3 April 2028.
- Chat Control 2.0 (CSAR): not adopted — sixth trilogue held 29 September 2026; Coreper, LIBE and a full Parliament vote still to come.
Comparison table
| Aspect | Chat Control 1.0 | Chat Control 2.0 |
|---|---|---|
| Legal act | Regulation (EU) 2026/1881 | Child Sexual Abuse Regulation (CSAR) — proposal |
| Status | In force since 31 July 2026 | Not adopted — sixth trilogue held 29 September 2026 |
| Voluntary or mandatory | Voluntary — providers may scan | Would be mandatory — as of 30 September 2026, not decided |
| Scope | Known child sexual abuse material in messaging and mail services | Potentially broader detection obligations — as of 30 September 2026, not decided |
| Expiry | 3 April 2028 | Would be permanent |
| Next step | Runs until expiry or replacement | Provisional deal, then Coreper, LIBE committee and a full Parliament vote |
What each row means
Legal act
Chat Control 1.0 is Regulation (EU) 2026/1881, published 28 July 2026. It replaced the 2021 interim derogation, whose extension the European Parliament rejected on 26 March 2026 and which lapsed on 3 April 2026. Chat Control 2.0 is the CSAR proposal — the permanent framework still under negotiation.
Voluntary vs mandatory
Under 1.0, no provider is obliged to scan anything; participation is a choice. The CSAR debate is precisely about whether detection orders could become compulsory — the Irish presidency's 'search plans' approach drew warnings from the Council's own lawyers that it could be struck down in court.
Expiry
1.0 is a bridge: it expires on 3 April 2028. 2.0 is intended as the permanent regime that would replace it.
Age verification
Age verification was agreed out of the detection debate in the trilogues — it is treated separately from scanning obligations.