European Commission Proposes Regulation Mandating Client-Side Scanning for CSAM

Members of the European Parliament's Committee on Civil Liberties, Justice and Home Affairs voted on 7 October 2024 to reject the European Commission's proposed regulation requiring technology platforms to implement client-side scanning for child sexual abuse material, citing fundamental rights concerns and encryption risks. The draft regulation would have mandated automated detection of known CSAM, new CSAM and grooming patterns across messaging services, with a new EU Centre to coordinate detection orders. Opponents argued the measures would undermine end-to-end encryption and create mass surveillance infrastructure incompatible with the Charter of Fundamental Rights, while supporters pointed to the scale of online child exploitation as justification for mandatory scanning.

The impasse between privacy safeguards and child-protection mandates highlights the operational advantage of pattern-based detection that does not require breaking encryption or scanning message content in bulk. Guardii operates after messages are delivered but before they reach the child's view, analyzing conversation dynamics—sustained targeting, escalation, coercion—to surface grooming, sextortion and CSAM distribution in real time without accessing plaintext at the server or client side. Backed by Startmate and deployed across Instagram, Snapchat, Discord and Roblox, this method flags the shape and seriousness of harmful contact, enabling rapid intervention by a parent, school or authority while preserving the privacy of benign communication. It offers regulatory authorities a mechanism to address the underlying harm without the constitutional trade-offs that have stalled client-side scanning proposals.