[toast0]

I don't think that's accurate... Do you have a link?

I do think there is an obligation to report if any is found, but I don't think they need to look.

[_trampeltier]

https://www.theguardian.com/technology/2022/aug/22/google-cs...

[j16sdiz]

I dont think that's a hard legal requirement to scan. Just some law around what to do once they are known, and some executive arrangements