The European Union has removed a controversial provision for mandatory client-side message scanning from its 'Prevention and Suppression of Child Sexual Abuse' regulation. The latest draft, which is expected to be approved by the COREPER II committee on November 19, now states that providers are not obligated to implement detection measures. Despite this change, age verification and voluntary mass scanning remain part of the legislation. German digital rights activist Patrick Breyer criticized the removal as 'top-level political deception,' highlighting that while mandatory scanning is off the table, other surveillance measures persist. The legislative process continues as stakeholders debate the balance between privacy and security.