Sponsors (6)
The bill improves law enforcement's ability to preserve and process child sexual abuse evidence by enabling vetted private vendors with strong cybersecurity requirements and limited liability, trading off reduced civil accountability and added breach and administrative risks.
Law enforcement agencies (federal, state, local) can contract vetted private vendors to securely store and forensically process child sexual abuse material and must retain evidence consistent with retention laws or through the statute of limitations/sentence, improving evidence preservation for investigations and prosecutions.
Approved vendors must meet NIST cybersecurity standards and undergo annual independent audits, raising technical safeguards that reduce the risk of theft or leakage of highly sensitive evidence.
Limiting civil and criminal liability for vendors performing contracted evidence-handling tasks reduces legal risk and encourages qualified private firms to provide specialized forensic and secure storage services to government agencies.
Limiting civil and criminal suits against vendors reduces accountability and can make it harder for victims to obtain redress when contractors misuse sensitive material or fall short of required conduct.
Allowing private contractors to store child sexual abuse material, even with strict controls, creates a real risk that data breaches or failures could retraumatize victims if safeguards fail.
Requiring that evidence remain in the United States could complicate multi-jurisdictional investigations and forensic cooperation with foreign partners, potentially slowing some probes.
Based on analysis of 2 sections of legislative text.
Allows covered law-enforcement agencies to use approved cloud vendors to store/process child pornography, shields vendors from most suits while requiring NIST-based cybersecurity and access controls.
Official title: To limit liability for certain entities storing child sexual abuse material for law enforcement agencies, and for other purposes.
Introduced March 5, 2026 by Laurel Lee · Last progress September 17, 2026
Authorizes federal, state, and local law enforcement and prosecutors to retain "approved vendors" to store, maintain, and forensically process child pornography and related obscene material in digital/cloud environments. It creates a limited-liability shield for vendors performing those contracted services while preserving liability for intentional, reckless, or malicious misconduct and sets cybersecurity and access-control requirements for vendors handling such material. The bill defines key terms (approved vendor, child pornography, child obscenity, covered agency, State, local) and requires vendors to meet modern cybersecurity standards and strict access controls before they may be used by covered agencies. No appropriations, criminal penalties, or specific funding mechanisms are included in the provided text.