The NCMEC, who manages the CSAM database, is a private organization.

Wait, so two American companies, Apple and NCMEC, are working together to install spyware on all Apple devices world-wide, with no government involvement?

https://news.ycombinator.com/item?id=28081184 It's a bit worse than that.

I'm sure they'd argue until they're blue in the face about how it's not spyware, but... yes.

Not quite, they're an NGO and the CyberTipline which it operates (the database Apple will use) was established by S.1738 [PROTECT our Children Act of 2008], and they get an appropriation from Congress to run that and work with law enforcement.

It's kind of like the PCAOB... private 501.3(c) with congressional oversight and funding.

I think the strategy is that the organization is able to do more for helping children internationally if they're not seen as part of the Justice department and the executive, which after the debacle with CBP and "kids in cages", was probably the right call.

Interesting how that shields them from any and all government transparency.