Bill > S3023

This bill, titled the "Safe Cloud Storage Act," aims to update existing law to allow law enforcement agencies to more effectively store and manage digital evidence related to child pornography and child obscenity. It introduces the concept of an "approved vendor," which is an entity providing digital storage and analytical services that has been contracted by a "covered agency" (a Federal, State, or local law enforcement or prosecutorial agency) to store such material and make it available upon request, along with providing technical support. Crucially, the bill grants these approved vendors limited liability, meaning they generally cannot face civil claims or criminal charges for their work in storing this sensitive material, unless they engage in intentional misconduct, negligent conduct, or act with actual malice or reckless disregard for substantial risk of harm. To ensure responsible handling, approved vendors must adhere to strict cybersecurity requirements, including using standards from the National Institute of Standards and Technology (NIST), minimizing employee access, employing end-to-end encryption, undergoing annual audits, and promptly addressing any identified security issues. The bill also outlines requirements for evidence storage by covered agencies, vendor data location (generally within the U.S. unless an exception is granted), notification procedures to the Department of Justice, and procedures for handling contract breaches.

Justice

https://www.congress.gov/bill/119th-congress/senate-bill/3023/all-info