Apple Dodges CSAM Lawsuit, Judge Still Side-Eyes It Hard
What happened
A federal court dismissed the third amended complaint in Amy v. Apple, a lawsuit alleging Apple's failure to scan iCloud for CSAM constituted a 'design defect.' The court ruled Apple is fully immune under Section 230, even though internal Apple texts allegedly showed the company knew its tools were being used to distribute CSAM.
Why this matters
This is a direct test of Section 230's outer limits, and Apple just proved the shield still holds even when plaintiffs argue a company *chose* not to build a safety feature (PhotoDNA) that competitors use. It's a big deal for every cloud storage and messaging platform watching how far '230 covers design decisions' actually stretches.
The slightly cynical read
Apple spent years publicly flip-flopping — building NeuralHash, backing off amid privacy backlash, then encrypting everything — and now gets to walk away from liability using the exact legal doctrine tech companies love to cite and lawmakers love to threaten. Content moderation activism, meet content moderation immunity.
What to watch next
Plaintiffs are all but guaranteed to appeal to the Ninth Circuit, where Section 230's boundaries have been chipped at before (see: Doe v. Twitter carve-outs). If the appeals court finds daylight in the 'design defect' framing, this could reopen the entire debate on platform liability for encrypted storage.