What is the new EU law on online child protection?

EU member states have agreed on new legislation requiring tech companies to assess and mitigate risks to children online, rather than mandating the identification and removal of CSAM.

Will Google and Meta be forced to remove CSAM under the new EU law?

No, the new EU agreement does not force companies like Google and Meta to identify and remove child sexual abuse materials. They must now assess risks and take preventative measures.

What is the EU Center on Child Sexual Abuse?

This is a new organization established under the EU's child protection legislation to assist countries with compliance and provide support to victims of child sexual abuse.

Home / Technology / EU Child Protection Law Shifts Burden to Tech Firms

EU Child Protection Law Shifts Burden to Tech Firms

26 Nov, 2025

•

Summary

EU member states agreed on online child protection, avoiding mandatory CSAM removal.
Tech companies will assess and mitigate risks, rather than being forced to identify CSAM.
A new EU Center on Child Sexual Abuse will support countries and victims.

EU Child Protection Law Shifts Burden to Tech Firms

European Union member states have established a common position on legislation aimed at protecting children online. This agreement notably diverges from previous proposals by not mandating global tech companies to actively identify and remove child sexual abuse materials (CSAM).

The updated legislation requires major tech platforms to conduct risk assessments of their services and implement appropriate preventative measures. Oversight and enforcement will fall to individual national authorities within the EU, rather than a centralized EU body.

While the agreement avoids mandates for scanning encrypted communications, it does establish an EU Center on Child Sexual Abuse. This center is intended to bolster national compliance efforts and provide support to victims. The Council's position will now proceed to negotiations with the European Parliament.