[icebraining]

I think Google's only liable if they know about it and didn't report.

According to paragraph (f) of the 18 U.S. Code § 2258A,

Protection of Privacy.— Nothing in this section shall be construed to require an electronic communication service provider or a remote computing service provider to—

(1) monitor any user, subscriber, or customer of that provider;

(2) monitor the content of any communication of any person described in paragraph (1); or

(3) affirmatively seek facts or circumstances described in sections (a) and (b).

http://www.law.cornell.edu/uscode/text/18/2258A?quicktabs_8=...