A federal judge threw out a class action accusing a major technology company of failing to detect child sexual abuse material stored on cloud storage, ruling that a decades-old law shields the company from this kind of liability. The decision has renewed a long-running push in Congress to change that law.
Reviewed by Survivor Justice Alliance · Updated 2026-10-21
Figures drawn from the dismissed federal complaint and reporting on the July 14, 2026 ruling.
The dismissed case centered on a tool the company announced in 2021 that would have scanned photos being uploaded to cloud storage against a database of known child sexual abuse material hashes, flagging matches for review. Child safety advocates initially welcomed the plan. Within months, the company shelved it entirely following backlash from privacy and civil liberties groups who warned the underlying scanning technology could be repurposed by governments for broader surveillance.
Plaintiffs in the proposed class action argued that abandoning the tool, after publicly committing to it, left the company's cloud storage services functioning as a known repository for abuse material with no meaningful detection system in place. The suit sought to represent roughly 2,680 survivors and asked for $32.8 billion in damages, framing the company's inaction as a business decision that prioritized product image over a known and preventable harm.
Ruling on July 14, 2026, the federal judge overseeing the case did not evaluate whether the company's decision to drop the scanning tool was reasonable. Instead, the dismissal turned on Section 230 of the Communications Decency Act, the 1996 law that generally shields online platforms from liability for content that their users, not the platform itself, upload or store.
The court concluded that holding the company liable for failing to detect abuse material uploaded by its users would functionally treat the company as the publisher of that material, the exact outcome Section 230 was written to prevent. The judge's order acknowledged the gravity of the underlying harm but concluded that current law leaves courts with little room to impose civil liability on a storage provider for content it did not create, however serious the consequences of not detecting it.
Plaintiffs' counsel has indicated an appeal is likely, and the ruling does not affect any separate criminal referral obligations platforms have under federal reporting law.
The scale of the dismissed claim, thousands of survivors and tens of billions in sought damages, reflects how central cloud storage has become to how abuse material circulates and resurfaces online. Advocates for the plaintiffs argued that a company controlling as much personal photo storage as the company does bears a heightened responsibility to use available detection tools, even imperfect ones, rather than none at all.
The company has said publicly that it uses other methods to detect and report abuse material, including scanning shared albums and links rather than private on-device photo libraries, and that it continues to evaluate additional safety tools. The company has not said whether it plans to revisit on-device scanning in any form.
This is not the first time Section 230 has shielded a major platform from a civil suit over child sexual abuse material stored or transmitted through its services, and legal observers expect it will not be the last unless Congress changes the underlying statute. The pattern has become familiar: survivors sue, platforms invoke Section 230, and courts, however reluctantly, generally find the law requires dismissal regardless of the underlying facts.
That pattern is precisely what a pending federal bill, the STOP CSAM Act, is designed to interrupt by creating a narrow, specific exception to Section 230 for these claims. The company dismissal, decided the same week that bill gained new momentum in Congress, is already being cited by the bill's supporters as a real-world illustration of the gap they say needs to be closed.
The Alliance does not represent any party in this litigation and does not provide legal advice. Survivors whose images have been shared or stored without their consent should contact law enforcement and consult an attorney about what options may be available under current law.
We strive to provide accurate, current reporting on news and related legal proceedings. However, articles may contain errors, omissions, or outdated information. Allegations are not established facts, and individuals accused of criminal offenses are presumed innocent unless proven guilty in a court of law.
If you identify an inaccuracy or would like to request a correction, revision, or update, please email info@survivorjusticealliance.org with the article URL, the requested change, and any supporting documentation. We will review submissions and make corrections or updates as appropriate.
Some content may be distressing. Please use discretion when reading.
Reporting reflects information available at the time of publication. Cases may develop, and articles may be updated or corrected. To report an error, request an update, or raise a privacy concern, please contact our editorial team.
If you or someone else is in immediate danger, contact local emergency services.
A dismissal on legal grounds is not the same as a ruling on the underlying facts. Here's what actually happened:
The Survivor Justice Alliance is a civil-justice information resource, not a law firm; nothing here is legal advice. Attorney advertising. Support is available 24/7 at the RAINN hotline, 800-656-4673.
The dismissal turned on Section 230 of the Communications Decency Act, which generally bars civil liability for platforms over content their users store or upload, regardless of how serious the resulting harm is.
The ruling did not evaluate whether the company's decision to abandon its scanning tool was reasonable; it found the law bars this type of claim from proceeding at all, regardless of the facts.
Section 230 is a 1996 federal law that shields online platforms from being treated as the publisher of content their users create or store, which courts have repeatedly applied to bar civil claims over hosted abuse material.
Plaintiffs' counsel has indicated an appeal is likely, though the outcome and timeline of any appeal remain uncertain.