Cloud vendors storing child abuse evidence get broad legal immunity
S. 3023 — Safe Cloud Storage Act · Filed by Marsha Blackburn (R-TN) · 9 cosponsors · Introduced Oct 21, 2025 · Passed chamber
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill creates a legal shield for cloud storage companies that contract with law enforcement to store child sexual abuse material (CSAM) as evidence. It limits lawsuits against these vendors to cases involving intentional misconduct, actual malice, or reckless disregard—blocking ordinary negligence claims. The bill requires vendors to meet cybersecurity standards, keep data in the US, and notify the Justice Department, but protects them from civil and criminal liability for storing and handling CSAM on behalf of police and prosecutors.
Why we flagged it
The bill's operative mechanism is a liability carve-out for cloud vendors storing CSAM evidence. While framed as modernizing law enforcement capability, the core function is to restrict civil and criminal remedies against private contractors.
What the text implies
- Vendors may face reduced incentive to invest in security beyond minimum NIST standards, since negligence claims are barred even if a breach exposes CSAM to unauthorized parties.
- Victims of child exploitation whose images are stored may lose the ability to sue vendors for mishandling or unauthorized access, even if negligence caused harm.
- The 'intentional misconduct' standard is narrower than ordinary negligence; a vendor could fail to follow its own security protocols and still be shielded if the failure was merely careless rather than deliberate.
- State and local law enforcement may lack leverage to enforce contract terms if vendors know they cannot be sued for breach-related harms, only for intentional violations.
- The bill does not explicitly require vendors to disclose breaches to law enforcement or victims, only to notify DOJ of contract changes or terminations.
Section numbers refer to the bill text the analysis read — linked under Primary records below.
Who it affects
The bill serves a legitimate law enforcement need—secure CSAM storage is essential for investigations and prosecutions protecting children. However, it creates a broad liability shield that may prevent victims and the public from holding vendors accountable for negligence, data breaches, or mishandling of sensitive evidence, even when no intentional misconduct occurred.
Who stands to gain
- cloud service providers contracting with law enforcement
- technology vendors offering CSAM storage and forensic processing
Named in the bill
cloud service providers, Federal Bureau of Investigation, Department of Justice Criminal Division, Child Exploitation and Obscenity Section, State attorneys general, NIST (National Institute of Standards and Technology), PROTECT Our Children Act of 2008
Where it stands
9 cosponsors: 5 Democrats, 4 Republicans.
- Oct 21, 2025 — Introduced · Congress.gov: “Introduced in Senate”
- Oct 21, 2025 — Referred to Senate Committee on the Judiciary · Congress.gov: “Read twice and referred to the Committee on the Judiciary”
- Feb 5, 2026 — Reported out of committee · Congress.gov: “Committee on the Judiciary. Ordered to be reported with an amendment in the nature of a substitute favorably”
- May 20, 2026 — Passed the Senate · Congress.gov: “Passed Senate with an amendment by Unanimous Consent. (text of amendment in the nature of a substitute: CR…”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
Money around this bill
3 lobbying clients named this bill on 5 disclosure filings across 2 quarters, Dec 2025 to Jun 2026. Those filings disclosed $4,720,000 in lobbying spend. A filing names 18 bills on average, so that figure is what each filing reported, not a share belonging to this bill.
More lobbying clients named this bill than 61% of bills with at least one filing.
Marsha Blackburn, the sponsor, reported $133,620 in PAC receipts in the 2026 cycle.
- American Association for Justice — $3,610,000 on 2 filings
- Roblox Corporation — $870,000 on 2 filings
- Snap Inc. — $240,000 on 1 filing
Lobbying Disclosure Act filings through Jul 23, 2026. A filing shows who paid to lobby on a bill it names, not what changed.
How this was measured
Analysis — Quorum's AI read the bill text published by Congress.gov (8,756 characters) on Jul 10, 2026. Section numbers in the findings refer to that text, linked below; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
Money — Senate Lobbying Disclosure Act filings whose specific-issue field names this bill for quarters ending Dec 2025 to Jun 2026. A filing's amount is reported whole beside the median number of bills a filing names; it is never divided across them. PAC receipts are FEC-reported contributions to the sponsor's candidate committee in the 2026 cycle.
As of — lobbying records through Jul 23, 2026 · page rendered 2026-10-20.
“Cloud vendors storing child abuse evidence get broad legal immunity” QuorumCivic. https://share.quorumcivic.app/bill/119/s3023 Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.