Skip to main content

EU CSAM Interim

Regulation (EU) 2021/1232 + Regulation (EU) 2024/1307 (CSAM Interim Derogation)

Temporary legal bridge allowing certain communications providers to voluntarily detect/report/remove CSAM, notwithstanding ePrivacy constraints. Extended via 2024/1307 while permanent CSAR negotiated.

Jurisdiction

European Union

EU

Enacted

Unknown

Effective

Unknown

Enforcement

Not specified

Temporary regime; expires April 3, 2026

Who Must Comply

This law applies to:

  • Providers of number-independent interpersonal communications services in EU

Who bears obligations:

This regulation places direct obligations on deployers (organizations using AI systems).

Safety Provisions

  • Enables voluntary CSAM detection/reporting/removal by number-independent interpersonal communications services (NIICS)
  • Strict necessity/proportionality; GDPR still applies
  • Harmonized reporting on voluntary measures
  • Exclusion of audio communications
  • Mandatory DPIA for detection technologies
  • Compulsory human review before reporting

Compliance Timeline

Apr 3, 2026

Derogation expires (unless replaced/extended)

Quick Facts

Binding
Yes
Mental Health Focus
No
Child Safety Focus
Yes
Algorithmic Scope
No

Why It Matters

Bridge law keeping voluntary scanning alive while permanent CSAR fight continues. Expires April 2026.

What You Need to Comply

For voluntary CSAM detection: documented legal basis + safeguards, DPIA, human review, plan for derogation expiration.

NOPE can help

Cite This

APA

European Union. (n.d.). Regulation (EU) 2021/1232 + Regulation (EU) 2024/1307 (CSAM Interim Derogation). Retrieved from https://nope.net/regs/eu-csam-interim-derogation

BibTeX

@misc{eu_csam_interim_derogation,
  title = {Regulation (EU) 2021/1232 + Regulation (EU) 2024/1307 (CSAM Interim Derogation)},
  author = {European Union},
  year = {n.d.},
  url = {https://nope.net/regs/eu-csam-interim-derogation}
}