As far as I'm aware, there is none, though the EARN IT act that passed the Senate last year would have brought us closer by opening a company to liability if they provide E2E encryption without a mechanism for CSAM detection. https://en.wikipedia.org/wiki/EARN_IT_Act_of_2020