This contains the text of the requirements. Search for "Grooming" and you'll find some particularly horrifying chunks regarding "scanning of conversations for content." Plus, not only known existing CSAM, but also identifying new material. Because don't you trust machine learning that can't tell the difference between a cat and a ferret to know what is and isn't CSAM? That's a very real path to "You have a photo of your child in the bathtub and the police smash down your door."
I like this bit, though:
> The processing of users’ personal data for the purposes of detecting, reporting and removing online child sexual abuse has a significant impact on users’ rights and can be justified only in view of the importance of preventing and combating online child sexual abuse.