EU CSAR (Proposed)
Proposal for a Regulation to prevent and combat child sexual abuse (CSAR)
Proposed permanent framework replacing interim derogation. Parliament position (Nov 2023) limits detection to known/new CSAM, excludes E2EE services. Council has not agreed General Approach.
Jurisdiction
European Union
Enacted
Pending
Effective
TBD
Enforcement
TBD
Permanent regulation still in trilogue as of August 2026: a fifth trilogue was held June 29, 2026, with most aspects agreed under the Cyprus Presidency but detection-measure scope and entry-into-application timelines unresolved. Meanwhile the interim ePrivacy derogation (Regulation 2021/1232) expired April 3, 2026 after Parliament declined to extend it; the Council adopted a replacement temporary derogation (running to April 3, 2028) on July 2, 2026, and Parliament approved a narrower version with amendments on July 6, 2026 - the Council has three months to accept them or the file goes to conciliation.
EUR-LexWhy It Matters
If EU adopts detection-order model, becomes global reference—directly colliding with encrypted messaging and private AI chat.
Recent Developments
July 2026: Council adopted a new temporary ePrivacy derogation (to April 3, 2028) on July 2; Parliament approved a more limited version with amendments (restricted detection scope, judicial approval) on July 6, returning the file to the Council. Between the April 3, 2026 expiry of Regulation 2021/1232 and final adoption of the replacement, no derogation is in force for voluntary CSAM detection in private communications.
At a Glance
Applies to
Harms addressed
Requires
Who Must Comply
- Online services and communications providers (scope TBD)
Obligations fall on:
Safety Provisions
- Risk assessment + mitigation duties for at-risk services
- Potential detection orders (contested)
- EU Centre for coordination/reporting
- Parliament: excludes E2EE, limits to known/new CSAM (not grooming)
Compliance & Enforcement
Penalties
Penalties pending regulatory determination
View on map
European Union
Focus Areas
Cite This
APA
European Union. (n.d.). Proposal for a Regulation to prevent and combat child sexual abuse (CSAR).
Related Regulations
EU DSA Minors Guidelines
Commission guidelines under DSA Article 28(1) establishing measures for online platforms to protect minors, including age assurance, default privacy settings, anti-addictive design restrictions, recommender system safeguards, and protections against grooming and exploitation.
EU CSAM Interim
Temporary legal bridge allowing certain number-independent interpersonal communications providers to voluntarily detect, report, and remove child sexual abuse material notwithstanding ePrivacy constraints, pending the permanent CSAR framework. Now carried by Regulation (EU) 2026/1881, which succeeded the expired Regulation (EU) 2021/1232 and applies until April 3, 2028.
DE JuSchG §24a (KidD)
Requires providers of certain telemedia services to implement provider-side precautionary measures ("Vorsorgemaßnahmen") with regulator-facing evaluability via published BzKJ criteria.
FR SREN
France's 2024 "digital space" law strengthening national digital regulation and enforcement levers via ARCOM across platform safety and integrity issues.
Ireland OSMR
Establishes Coimisiún na Meán (Media Commission) with binding duties for video-sharing platforms. One of the cleaner examples of explicit self-harm/suicide/eating-disorder content duties in platform governance.
Germany KI-MIG
German national law implementing the EU AI Act, designating the Bundesnetzagentur (BNetzA) as the lead market surveillance authority under a centralized hybrid model.
Last updated August 3, 2026. Verify against primary sources before relying on this information.