NIST Privacy Framework, Control-PCT.DM-P9

Implement appropriate technical and organizational measures against unauthorized or unlawful processing and against accidental loss, destruction, or damage, including pseudonymization and encryption where appropriate, and test their effectiveness regularly.

Use technologies that are sufficiently reliable in that they limit to the maximum extent possible the rate of errors in detecting content representing online child sexual abuse and, where occasional errors occur, rectify their consequences without delay (Article 3(1), point (e)). Limit the technologies you use to detect patterns of possible solicitation of children to relevant key indicators and objectively identified risk factors such as age difference and the likely involvement of a child in the scanned communication, without prejudice to the right to human review (Article 3(1), point (f)).