ScanRecords

Companies / Google (Gmail)

Google (Gmail)

Scans under Chat Control — confirmed
Gmail · Google Chat

Which services the evidence names

The derogation requires filers to name, on a standard form, the “specific number-independent interpersonal communications service concerned”. Google’s own report answers with two services. This is the provider’s filing to the Commission, not a third party’s description of it.

Named Gmail, Google Chat — named in Google Ireland transparency report under Regulation (EU) 2021/1232, archived here: The numbers below cover the consumer version of Google Chat and Gmail for the relevant time period for EU users. Specific number-independent interpersonal communications service concerned Gmail Google Chat

Not named Google Photos is also operated by Google and is not a messaging service, so it falls outside the kind of service this derogation covers. No source we track names it. Breyer’s overview names only Gmail, which the filing itself now supersedes.

The Commission's report, which is what puts Google in this group at all, names the provider and not the service. That is why the two lines above are separate.

What we watch for — Google files the derogation's transparency reports today. We watch for the reports stopping, scanning language disappearing from these documents, and what replaces the legal basis when the derogation expires in April 2028.
Services
Gmail, Google Chat, Google Photos (evidence names Gmail, Google Chat)
Status
Scans under Chat Control — confirmed
Held since
26 Jul 2026
Documents
5 tracked
App Store label
Tracked
Changes recorded
1 — latest 19 Aug 2026

Tracked documents

DocumentLast fetchedSizeHashSnapshot
Privacy Policy
policies.google.com		 4 Aug 2026 90,068 chars 08dd57fc6329 text · raw · wayback
Government Information Requests
policies.google.com		 9 Sep 2026 7,487 chars 104309bebe61 text · raw · wayback
How Google fights CSAM
protectingchildren.google		 19 Aug 2026 10,512 chars cc7d3ac17d59 text · raw · wayback
Google Play Data Safety
play.google.com		 26 Jul 2026 4,364 chars ae85d952bf81 text · raw · wayback
Transparency report under Regulation (EU) 2021/1232
storage.googleapis.com		 28 Jul 2026 45,515 chars 482230f522c6 text · raw · wayback

text is the extracted record we hash and diff; raw is the page's original HTML kept verbatim as evidence — it renders without its styling here, by design.

App Store privacy label — Gmail - Email by Google

Apple requires every app to declare the data it collects. This is Google (Gmail)'s current declaration, as shown on the App Store; ScanRecords records when it changes.

Data Linked to You

  • Purchases
  • Location
  • Contact Info
  • Contacts
  • User Content
  • Search History
  • Identifiers
  • Usage Data
  • Diagnostics
  • Other Data

What we searched for

A status that rests on absence is only as good as the search behind it. Every one of Google (Gmail)'s 5 archived documents (157,951 characters) was searched for the same published vocabulary used on every company here — in English, German and French. The search is a plain function of the archived text and re-runs whenever that text changes, so it always describes the documents listed above. Re-run it against this archive yourself with tools/scan-terms.mjs.

TermHitsIn context
Regulation 2021/1232 6 “Google Ireland Transparency Report Under Regulations (EU) 2021/1232 and (EU) 2024/2916 Regulation (EU) 2021/1232, as amended by Regulation (EU) 2024/1307, introduced a temporary…” — derogation-report
“Google Ireland Transparency Report Under Regulations (EU) 2021/1232 and (EU) 2024/2916 Regulation (EU) 2021/1232, as amended by Regulation (EU) 2024/1307, introduced a temporary derogation from certain provisions of Direct…” — derogation-report
“…l report on the processing of personal data under Article 3(1), point (g), subpoint (vii), of Regulation (EU) 2021/1232. This report provides information on the processing of personal data for the purpose of detecting and removin…” — derogation-report
derogation / Ausnahmeregelung / dérogation 1 “…and (EU) 2024/2916 Regulation (EU) 2021/1232, as amended by Regulation (EU) 2024/1307, introduced a temporary derogation from certain provisions of Directive 2002/58/EC as regards the use of technologies by providers of number-ind…” — derogation-report
CSAM / CSAE 177 “…artners Toolkit interest form Introduction Fighting abuse on our own platform and services Tools to fight CSAM Alliances & Programs Fighting child sexual abuse online Google is committed to fighting online child sexua…” — child-safety
“…ual abuse and exploitation and preventing our services from being used to spread child sexual abuse material (CSAM). We invest heavily in fighting child sexual abuse and exploitation online and use our proprietary technolog…” — child-safety
“…ndustry on programs to share our technical expertise, and develop and share tools to help organisations fight CSAM. Learn more about our child safety toolkit here . Fighting abuse on our own platforms and services Google…” — child-safety
child sexual abuse / Kindesmissbrauch 46 “…duction Fighting abuse on our own platform and services Tools to fight CSAM Alliances & Programs Fighting child sexual abuse online Google is committed to fighting online child sexual abuse and exploitation and preventing our service…” — child-safety
“…fight CSAM Alliances & Programs Fighting child sexual abuse online Google is committed to fighting online child sexual abuse and exploitation and preventing our services from being used to spread child sexual abuse material (CSAM). W…” — child-safety
“…to fighting online child sexual abuse and exploitation and preventing our services from being used to spread child sexual abuse material (CSAM). We invest heavily in fighting child sexual abuse and exploitation online and use our propri…” — child-safety
NCMEC / CyberTipline 35 “…hes of known CSAM. When we find CSAM, we report it to the National Center for Missing and Exploited Children (NCMEC), which liaises with law enforcement agencies around the world. Visit NCMEC Collaborating globally We coll…” — child-safety
“…Missing and Exploited Children (NCMEC), which liaises with law enforcement agencies around the world. Visit NCMEC Collaborating globally We collaborate with NCMEC and other organizations globally in our efforts to combat…” — child-safety
“…ses with law enforcement agencies around the world. Visit NCMEC Collaborating globally We collaborate with NCMEC and other organizations globally in our efforts to combat online child sexual abuse. As part of these efforts…” — child-safety
hash matching / hash database 6 “…rt CSAM with trained specialist teams and cutting-edge technology, including machine learning classifiers and hash-matching technology, which creates a “hash”, or unique digital fingerprint, for an image or a video so it can be co…” — child-safety
“…CSAM we share with NCMEC. These hashes help other platforms identify CSAM at scale. Contributing to the NCMEC hash database is one of the important ways we, and others in the industry, can help in the effort to combat CSAM because it…” — child-safety
“…ion so they can report it to the authorities. USED BY Facebook Snapchat Safernet CSAI Match USED FOR VIDEO HASH MATCHING In 2014, YouTube engineers developed and adopted technology to tag and remove known CSAM videos from our…” — child-safety
Internet Watch Foundation 3 “…al abuse imagery is illegal, with information on how to report this content to trusted organizations like the Internet Watch Foundation in the UK, the Canadian Centre for Child Protection and Te Protejo in Colombia. When these warnings are shown…” — child-safety
“…e database (please specify) Google obtains hashes of known CSAM from a variety of trusted sources, including: Internet Watch Foundation (IWF), NCMEC; and others, including content we find on our platforms and subsequently hash. These unverified…” — derogation-report
“…Google obtains hashes of known CSAM from a variety of trusted sources, including: Internet Watch Foundation (IWF), NCMEC; and others, including content we find on our platforms and subsequently hash. These unverified hashe…” — derogation-report
automated detection / automatisierte Erkennung 1 “…s work around-the-clock to identify, remove, and report this content, using a combination of industry-leading automated detection tools and specially-trained human reviewers. We report CSAM to NCMEC, the clearinghouse and comprehensive rep…” — derogation-report
classifier / machine learning detection 15 “…dentify and report CSAM with trained specialist teams and cutting-edge technology, including machine learning classifiers and hash-matching technology, which creates a “hash”, or unique digital fingerprint, for an image or a video…” — child-safety
“…ED FOR PREVIOUSLY UNSEEN IMAGE AND VIDEO CONTENT For many years, Google has been working on machine learning classifiers to allow us to proactively identify never-before-seen CSAM imagery so it can be reviewed and, if confirmed a…” — child-safety
“…of text processed for detection of solicitation of children in relation to EU users Google does not use text classifiers in its NI-ICS. Number of bytes of text processed for detection of solicitation of children in relation to no…” — derogation-report
monitor content / review content 3 “…We use different technologies to process your information for these purposes. We use automated systems that analyze your content to provide you with things like customized search results, personalized ads, or other features tailored to ho…” — privacy
“…e customized search results, personalized ads, or other features tailored to how you use our services. And we analyze your content to help us detect abuse such as spam, malware, and illegal content. We also use algorithms to recognize patte…” — privacy
“…uch as the IP addresses that accessed your mail, the associated location, and the date and time of access. We analyze your content to help us detect abuse such as spam, malware, and illegal content. For example, YouTube likeness detection h…” — privacy

Found nowhere in these documents: Chat Control / Chatkontrolle · ePrivacy · PhotoDNA · scan / scanning / gescannt

Record RSS ↗