EU Child Safety Detection Gap Extended to 2028, With End-to-End Encryption Exemption

The Council of the European Union announced that a child protection exemption to the e-Privacy Directive will be reinstated until April 3, 2028, once again allowing online platforms to voluntarily detect and remove child sexual abuse material in the EU. A new provision excludes from this authorization certain interpersonal communications that are end-to-end encrypted. The temporary derogation had expired on April 3, 2026, creating a legal gap during which platforms across the EU lost the legal basis to proactively detect CSAM, even though the technology existed and companies were prepared to deploy it.

This regulatory gap illustrates the structural limitation of a detect-and-report regime that depends on legislative permission: when policy expires, the ability to intercept harm vanishes, regardless of technical readiness. Real-time pattern recognition closes that window. Guardii operates independently of content access, identifying coercion, escalation and predatory contact through the shape of the conversation itself rather than through retrospective scanning of stored material. By flagging hostile or exploitative behaviour as it unfolds across Instagram, Snapchat, Discord, Roblox and other platforms, anti-grooming and anti-sextortion detection can surface a child at risk to a parent, school or safeguarding professional before the harm materializes, without requiring anyone to decrypt, read or hold the underlying messages. For platforms navigating overlapping privacy and child safety mandates across jurisdictions, Guardii delivers targeted threat intelligence without introducing a mass surveillance architecture.