Limiting Liability for Cloud Vendors Storing Child Exploitation Evidence for Police.
This bill aims to modernize how law enforcement securely stores digital evidence related to child sexual abuse by utilizing specialized cloud storage companies. It grants these "Approved Vendors" limited civil and criminal liability protection, provided they adhere to strict cybersecurity requirements, including end-to-end encryption and annual audits. This measure is intended to ensure the integrity and security of crucial evidence in child protection cases.
Key points
Companies contracted by law enforcement to store digital evidence of child exploitation (Approved Vendors) receive legal protection against lawsuits related to this storage.
Vendors must comply with high cybersecurity standards (e.g., NIST framework, end-to-end encryption, annual audits) and keep all stored data within the United States.
Legal protection is void if the vendor engages in intentional misconduct, negligence, or reckless disregard regarding data security.
Law enforcement agencies must follow FBI (CJIS) security policies and local rules regarding the required retention period for evidence.
Introduced
Additional Information
Print number: 119_S_3023
Sponsor: Sen. Blackburn, Marsha [R-TN]
Process start date: 2025-10-21