Sponsors (10)
The bill improves law enforcement’s ability to store, secure, and retain digital child sexual abuse evidence by using vetted private vendors with strict security and retention rules, but it creates meaningful privacy, civil‑liberties, and legal‑accountability risks and adds compliance costs that may fall to governments and taxpayers.
Law enforcement and prosecutors can contract with vetted vendors to store and manage digital child sexual abuse material, improving evidence availability and the ability to investigate and prosecute offenses (including retention through applicable statutes).
Approved vendors must meet NIST cybersecurity standards, undergo annual independent audits, limit employee access, and log access — steps that reduce the risk of unauthorized disclosure and help preserve chain-of-custody for sensitive material.
Limited liability for vendors performing contracted duties is intended to encourage vendor participation and increase capacity, helping agencies manage large volumes of digital evidence.
Broad immunity and limited liability for vendors could reduce legal accountability and make it harder for victims or others to obtain redress for vendor negligence or misconduct; the immunity regime and its carve-outs may be legally contested, creating uncertainty.
Requiring vendors to store material in the U.S., allowing agency access, and permitting agencies to designate other law enforcement or prosecutors to view stored material increases risks to privacy and civil liberties and could expand dissemination of sensitive images beyond original investigative needs.
Mandated compliance with technical, audit, and notification requirements raises vendor costs that may be passed on to contracting agencies and ultimately taxpayers.
Based on analysis of 2 sections of legislative text.
Authorizes law enforcement to contract with approved vendors to store/manage digital child pornography/obscenity, sets NIST-based security and access rules, and provides limited legal immunity for vendors.
Introduced October 21, 2025 by Marsha Blackburn · Last progress May 21, 2026
Creates a federal program authorizing federal, state, and local law enforcement or prosecutors to contract with privately operated "approved vendors" to securely store, provide access to, and give maintenance/forensic assistance for digital child pornography and child obscenity. It grants those approved vendors broad civil and criminal immunity for actions taken while performing their contractual duties, with explicit exceptions for intentional misconduct, negligence, malice, reckless conduct, or acts unrelated to the contract. The bill also requires approved vendors to follow specified cybersecurity and access controls, including aligning protections with the current NIST Cybersecurity Framework.