Shields cloud providers under contract with law enforcement from most civil and criminal suits over storing child sexual abuse material, while requiring them to meet federal cybersecurity standards.

Official title: Safe Cloud Storage Act

Next stop House: awaiting action

Timeline each lane is a chamber; dates pull from congress.gov actions

House

Received 21-MAY-2026

Senate

Introduced 21-OCT-2025

Referred 21-OCT-2025

Approved by committee 05-FEB-2026

Reported 24-FEB-2026

On the calendar 24-FEB-2026

Passed 20-MAY-2026

Key points

Bars civil claims and criminal charges against approved vendors for work under law enforcement contracts, except for intentional or negligent misconduct, actual malice, or reckless acts.
Requires vendors to follow NIST's Cybersecurity Framework, limit staff access to stored material, use end-to-end encryption, and pass an independent annual security audit.
Requires stored material to stay in the United States unless the contracting agency consents for investigative purposes, and requires vendors to notify the Justice Department within 30 days of signing a contract.
Amends the PROTECT Our Children Act of 2008 by adding a new Section 202.

AI-generated from the Engrossed in Senate text of 20-MAY-2026 · verify · report an error

Official CRS summary

Current. The Congressional Research Service's summary covers the bill's latest wording (Passed Senate, 20-MAY-2026).

CRS is the Library of Congress's nonpartisan research office. Read it on congress.gov

Committee referrals (1)

Policy area

Crime and Law Enforcement

Sponsor Marsha Blackburn (R-TN) Cosponsors · 9

■ 5 D■ 4 R

5 Democrats

4 Republicans