CSAM Reporting Requirements

The information provided by IFTAS is for general guidance and informational purposes only. It does not constitute legal advice and should not be relied upon as such. IFTAS is not a law firm and does not offer legal services. For advice on legal or regulatory matters, please consult a qualified professional.

Background

If you become aware of CSAM or CSEA on your services you may be legally required to report your finding to a child safety hotline or law enforcement. In general, the country in which you host the media has jurisdiction. Exactly what needs to be reported, how quickly, and to whom varies depending on the country and type of provider.

Electronic service providers (this includes all ActivityPub services that are not single-user instances) are not generally required to actively seek out CSAM, but simply to report it when they are made aware of it.

To explore your legal requirements, check the Global Legislative Review in this document: https://cdn.icmec.org/wp-content/uploads/2018/12/CSAM-Model-Law-9th-Ed-FINAL-12-3-18-1.pdf

The “ISP Reporting” column defines your requirements (ISP in this context includes electronic communication service providers)

Be aware that some jurisdictions may require you to store the material for a law enforcement/investigatory purpose, in which case you must have processes in place to securely store and limit access to the material for a set period of time.

List of national reporting hotlines

By country: https://support.google.com/websearch/answer/148666?hl=en

If you can’t find your country listed, contact INHOPE through their website: https://inhope.org/


IFTAS
IFTAS
@about.iftas.org@about.iftas.org

Nonprofit trust and safety support for volunteer social web content moderators

47 posts
299 followers

IFTAS is a non-profit organisation committed to advocating for independent, sovereign technology, empowering and supporting the people who keep decentralised social platforms safe, fair, and inclusive..