That sounds kinda reasonable then. If the company has access to the chat logs in plain text, they should probably be scanning it for CSAM. Though the use of AI to identify it is concerning, given the low accuracy. And I guess there’s also the risk of communications with someone’s doctor being flagged.

On reflection it’s still a dumb law.