Shields cloud storage vendors from most lawsuits and criminal charges when they store child pornography, child obscenity, or intimate images of minors for police and prosecutors, while requiring them to meet federal cybersecurity standards.

• Bars civil claims and criminal charges against approved vendors over their contract work, except for intentional misconduct, negligent conduct, actual malice, or reckless disregard of a substantial risk.
• Requires vendors to secure the material under the NIST Cybersecurity Framework, limit which employees can access it, use end-to-end encryption, and pass an independent cybersecurity audit each year.
• Requires the stored material to stay in the United States unless the contracting agency consents to a transfer for investigative purposes.
• Requires vendors to notify the Justice Department within 30 days of signing a contract and to keep preserving evidence if a government agency breaches or ends the contract.

• Judiciary Committee (House)

Crime and Law Enforcement