Section 617.247 creates separate possession and dissemination felonies

Subdivision 4 prohibits possession of child sexual abuse material and possession of a computer, disk, or any electronic, magnetic, optical, or other storage system containing it. The person must know or have reason to know the material’s content and character.

Subdivision 3 separately prohibits dissemination to an adult or minor with the same knowledge standard. Unlike profit-based dissemination under Minn. Stat. § 617.246 (2026), section 617.247 does not require payment or commercial gain.

A person can be investigated for both offenses when the State claims the person possessed files and sent or made them available to someone else. Production, promotion, or use of a minor involves different conduct under section 617.246 and should not be collapsed into possession.

The complaint should identify the subdivision, dates, devices or accounts, files, alleged act of dissemination, knowledge theory, age enhancement, and any prior-offense or registration enhancement. A generic allegation that illegal images were “found” does not explain whose knowing possession the State intends to prove.

Section 617.247 contains exceptions for official duties by peace officers, court personnel, and attorneys, and for specified licensed professionals or people acting at their direction in bona fide treatment or professional education. The exception is limited; it is not general permission to keep material for personal research.

“Child sexual abuse material” is a defined legal term

Section 617.247 adopts the definitions in section 617.246. The material can be an original or reproduction of a picture, film, photograph, negative, slide, video, disc, or drawing of a sexual performance involving a minor.

It also can be a digital or computer-generated visual depiction that uses a minor to depict actual or simulated sexual conduct, or that is modified to make an identifiable minor appear to engage in sexual conduct. A separate clause concerns material presented or distributed in a way conveying the impression that it contains such a depiction.

Sexual conduct includes listed acts, masturbation, sadomasochistic abuse as defined, lewd exhibition of genitals, and specified contact in apparent sexual stimulation or gratification. Nudity alone is not listed as an independent category. The image, focal point, pose, setting, and context may bear on whether an exhibition is lewd.

An identifiable minor is someone who was under 18 when the depiction was created or altered and whose image was used. Proof can involve the person’s testimony, source images, records, comparison evidence, metadata, and admissions. Appearance-based estimation should not be treated as infallible.

The legislature changed the terminology from “pornographic work” to “child sexual abuse material” in 2025. Older cases use the former term and sometimes quote earlier definitions. They must be compared with current text rather than copied mechanically.

Actual and constructive possession require control, not mere proximity

Actual possession generally concerns material found on the accused’s person or in direct physical control. Digital cases more often involve constructive possession: material located on a device, drive, account, server, or storage location the State claims the accused consciously exercised dominion and control over.

Ownership is relevant but not decisive. A work computer may belong to an employer. A home router may serve many people. A phone may be borrowed, a tablet shared, or an old drive sold. The State must connect the accused to the particular material and the knowing control required by the charge.

Exclusive control of a location can strengthen an inference. Joint access makes attribution more complicated. User profiles, passwords, biometrics, messages, browsing, file organization, log-in times, and physical access can support or undermine the inference.

Temporary technical presence is not necessarily conscious possession. A browser can cache data, an application can prefetch content, and a messaging platform can download previews. The legal significance depends on access, awareness, control, retention, and the system’s operation.

The statute also refers to possessing a storage system containing prohibited material. That language does not eliminate knowledge. A person who possesses a large device containing an unknown hidden file is situated differently from someone who repeatedly opens, renames, sorts, and transfers files.

Knowledge or reason to know is a required element

The State must prove that the accused knew or had reason to know the material’s content and character. Prosecutors may use the images, file names, search terms, folder structure, messages, subscriptions, repeated access, concealment, or admissions as circumstantial evidence.

A suspicious file name may support an inference but is not always accurate. Files can be mislabeled, bundled, spoofed, or received without request. A thumbnail may not reveal age or content. Complete context matters more than an isolated label.

“Reason to know” is not permission to convict solely because someone should have maintained a cleaner device. The evidence must show facts available to the accused that would communicate the material’s unlawful content and character.

Quantity can matter, but volume alone does not identify the user or how files arrived. Thousands of artifacts may derive from duplicated thumbnails, backups, archives, or synchronization. A defensible count should separate unique images from technical duplicates.

Deletion can be evidence of awareness, but it can also arise from automated cleanup, storage limits, privacy habits, or ordinary application behavior. Examiners should distinguish user-initiated deletion from system processes and state the limits of that conclusion.

Dissemination requires proof of a transfer or making material available

Dissemination can be alleged through messages, email, file-sharing, cloud links, social platforms, websites, peer-to-peer software, or physical media. The State should prove what was transmitted, who initiated it, who received it, and whether the accused knew the content and character.

An outgoing record can be powerful evidence, but applications behave differently. Some automatically upload files, generate previews, share libraries, or make folders available. Expert testimony may be needed to establish what user action caused an event.

Incomplete or failed transmission raises a different issue from successful delivery. Logs should be examined for upload, queue, cancellation, error, access, and recipient download events. A link may exist without anyone opening it.

No profit is required under section 617.247. A private exchange, gift, or noncommercial post can qualify if the elements are proved. Profit-based dissemination under section 617.246 carries different wording and penalties.

Receiving material does not itself prove dissemination. Replying, forwarding, posting, or knowingly enabling access may. The charge should be tied to a definite act instead of assuming that possession means distribution.

Downloads, browser caches, thumbnails, and cloud synchronization

A user-directed download to a chosen folder differs from an automatic cache entry. The first may show selection and control; the second may be created by software merely because a page or message loaded. Examiners should identify the application and its default behavior at the relevant time.

Thumbnail databases store reduced images so devices can display folders quickly. A thumbnail may persist after the original was deleted or after an external drive was removed. It can establish prior display by a system without proving who saw the image or still controlled the original.

Cloud services can synchronize content across phones, computers, and tablets. One upload may create local artifacts on several devices. Counting each synchronized copy as an independent acquisition can exaggerate both volume and conduct.

Peer-to-peer software can download and upload simultaneously. Whether sharing was enabled, what folders were exposed, what portion transferred, and what the user understood are technical and factual questions. Default settings are not a substitute for proof of knowledge.

Unallocated disk space can contain remnants of deleted files that ordinary users cannot see or control. Recovery by forensic software does not prove the accused could access the fragment when police seized the device.

Backups preserve old states. Dates may reflect copying or restoration rather than original acquisition. A sound timeline correlates file-system data with account logs, device use, network records, and human activity.

Shared devices, compromised accounts, and identity

An account name or internet address usually identifies an account or connection, not necessarily a person. Households, workplaces, roommates, guests, remote administrators, and unauthorized users can share infrastructure.

Attribution evidence can include login records, multifactor events, device identifiers, location history, messages, distinctive searches, payment, photographs, and simultaneous activity. The defense should examine evidence pointing to every authorized user, not only the person police first suspected.

Compromise should be evaluated with evidence, not speculation. Password-reset notices, unfamiliar sessions, malware, remote-access tools, credential leaks, support tickets, and changes to recovery information can corroborate unauthorized use.

A device may have several profiles but common storage. Administrator access can expose files created by another user. Timestamps alone may not show which profile or person caused a system event.

Investigators sometimes rely on an admission that a device “is mine.” That statement does not necessarily admit knowledge of every file. Interview context, precise wording, ownership, shared use, and the speaker’s technical understanding matter.

A reliable forensic examination must be reproducible

Investigators should preserve original media and work from verified forensic copies. Hash values, acquisition methods, tool versions, chain of custody, time-zone settings, and examination notes allow another expert to test the work.

The report should distinguish allocated files, deleted files, fragments, cache entries, thumbnails, attachments, cloud placeholders, and remote content. Lumping them together under “images found” hides legally important differences.

Each item should be connected to a location, source, relevant timestamp, access evidence, and alleged user. Hash matches to law-enforcement databases may assist classification but do not prove who placed the file on a device.

Age and content opinions also deserve scrutiny. Image quality, cropping, alteration, fictional status, and expert methodology affect reliability. The trier of fact must decide the statutory issue; a software score is not the verdict.

The defense examiner must handle suspected contraband under controlled legal arrangements. Counsel should not instruct a client to copy or email files for review. Courts and agencies can establish secure access without uncontrolled reproduction.

Altered and AI-generated images present distinct proof questions

The incorporated definition includes an image altered to make an identifiable minor appear to engage in sexual conduct. It also includes an obscene depiction of an individual indistinguishable from an actual minor created through generative AI or similar technology.

The AI clause requires more than saying an image looks young or artificial. The State must prove indistinguishability, the relevant creation technology, sexual conduct, and obscenity. Prompt history, generation logs, model data, editing layers, source images, and expert analysis may be relevant.

In Ashcroft v. Free Speech Coalition, 535 U.S. 234, 250–51 (2002), the Supreme Court distinguished virtual images from depictions produced through abuse of actual children and invalidated an overbroad federal law. Minnesota’s newer clause includes an obscenity limitation, but its application can still present First Amendment and vagueness questions.

Minn. Stat. § 617.2471 (2026) grants narrow immunity to specified service providers and employees for content supplied by another or protective actions when liability rests solely on the AI clause. It is not a blanket defense for creators or ordinary users.

Real imagery can be altered to look synthetic, and synthetic imagery can look photographic. A visual assumption is not a substitute for technical source analysis.

The State bears the burden of proving age: State v. Cannady

Subdivision 8 still prints an affirmative defense stating that the material was produced using only adults. But the official statute includes a note that the Minnesota Supreme Court held that subdivision unconstitutional.

In the official opinion State v. Cannady, 727 N.W.2d 403, 409–10 (Minn. 2007), the court held that requiring the defendant to prove adult-only production impermissibly shifted the burden on whether the material involved minors. The State must prove beyond a reasonable doubt that the work uses or appears to use minors as required by the offense.

This is not a technical footnote. A guide that simply repeats subdivision 8 as a valid affirmative defense gives dangerously incomplete advice. Age evidence, image quality, source, alteration, identity, expert testimony, and reasonable doubt remain defense issues, but the prosecution retains the constitutional burden.

The statute separately says consent by the minor or a parent, guardian, or custodian is not a defense. Consent does not establish age, possession, knowledge, or identity and may still be relevant to disputed context, but it cannot excuse a proved offense.

When the State alleges the under-14 enhancement, that younger age is an additional fact increasing the statutory maximum and must be properly charged and proved or admitted.

Digital search warrants and custodial statements

A warrant must establish probable cause, a nexus between suspected crime and each place or device, and sufficient particularity. Stale allegations, generalized profiles, or an address connected only by an old internet record may be challenged.

Digital warrants can expose years of private and unrelated data. The affidavit, authorized categories, date limits, device list, and execution should be compared with the actual extraction and report.

Provider returns may precede the home search. Preservation requests, subpoenas, warrants, platform reports, account logs, and subscriber records should be obtained and reviewed in their original form, including limitations and time zones.

During execution, officers may ask who owns a device, who uses it, which password works, or why a file exists. A person should not guess or try to explain technical evidence on the spot. A clear request for counsel protects against an improvised statement becoming the State’s attribution theory.

Never wipe a device or account after learning of an investigation. Destruction can eliminate favorable evidence and support additional allegations. Counsel can preserve material lawfully and address access through investigators or the court.

Multiple files do not automatically answer how many punishable offenses occurred

Prosecutors may charge multiple counts based on files, dates, devices, transmissions, or victims. The authorized unit of prosecution and the evidence supporting each count must be examined separately.

Older litigation in Cannady involved numerous computer images and multiple counts. Separate acquisition or possession events may support separate findings, but verdict dates, conduct, and proof must match the counts actually charged.

Minn. Stat. § 609.035 (2026) generally limits multiple punishment for conduct constituting more than one offense unless an exception applies. Convictions, sentences, and consecutive sentencing are related but distinct issues.

Duplicate files, synchronized copies, thumbnails, archives, and the same file on a backup should be identified. Technical multiplication should not be mistaken for separate human decisions without supporting evidence.

Dissemination events can be distinct from possession and from one another. A precise timeline is essential to motions, trial instructions, verdict forms, and sentencing.

Statutory penalties, Guidelines rankings, and conditional release

Ordinary possession carries up to five years and a $5,000 fine. Enhanced possession carries up to ten years and $10,000. Ordinary dissemination carries up to seven years and $10,000; enhanced dissemination carries up to 15 years and $20,000.

The enhancements are a qualifying prior conviction or adjudication under section 617.247 or 617.246, registered-predatory-offender status at the time, or involvement of a minor under 14. The complaint and verdict must support the enhanced paragraph.

The 2026 Minnesota Sentencing Guidelines rank ordinary possession at sex-offender-grid level G and enhanced possession at level E. Ordinary dissemination is level E; enhanced dissemination is level C. Criminal history and other rules determine the presumptive sentence.

If a person is committed to prison, subdivision 9 adds five years of conditional release, or 15 years after a qualifying prior listed sex offense or similar out-of-state or federal conviction. Conditional-release restrictions and violations can be severe.

A second or subsequent section 617.247 conviction within 15 years also requires a mental examination addressing whether treatment is necessary. Sentencing can include restitution, forfeiture disputes, assessments, probation conditions, and no-contact provisions.

Predatory-offender registration and life beyond the sentence

Registration under Minn. Stat. § 243.166 (2026) can be triggered by the charge and conviction structure, including same-circumstances rules. Any plea must be evaluated for registration before it is entered.

Registration requires extensive identifying, address, employment, school, vehicle, and contact information and prompt reporting of changes. A knowing violation is a separate felony with potential mandatory imprisonment.

Housing, employment, licensing, education, travel, family cases, immigration, and internet access can all be affected. Public community notification is governed by additional rules and is not identical to the duty to register.

Expungement should not be promised. Eligibility under Minn. Stat. § 609A.02 (2026) depends on disposition and current law, and sealing cannot undo every registration, private, federal, or collateral record.

Venue, current amendments, and related charges

Effective August 1, 2026, the new venue provision permits prosecution where the offense occurred, where the accused or alleged victim resides, or, if venue cannot be located there, where material was produced, reproduced, found, stored, received, promoted, disseminated, or possessed. See 2026 Minn. Laws ch. 118, art. 5, § 4.

Cloud accounts and multistate communications can create factual disputes. The State must apply the statute effective when the alleged conduct occurred; later amendments cannot retroactively increase punishment.

Related allegations can include use of a minor, solicitation, criminal sexual conduct, nonconsensual dissemination, computer offenses, obstruction, and federal crimes. Each has distinct elements.

The same investigation may involve state and federal agencies. A statement or device consent given to one can affect the other. Coordinated advice is important before interviews or negotiated resolutions.

Common defense issues in possession and dissemination cases

No knowing possession. Automatic caching, unsolicited receipt, inaccessible remnants, cloud sync, or another user may create reasonable doubt about awareness and control.

Wrong person. Subscriber, account, internet-address, or device ownership does not necessarily identify the human user.

Material not legally covered. The image may not depict defined sexual conduct, a minor, an identifiable minor, or the required AI category.

No dissemination. The alleged upload may have failed, been automatic, or never been made available by the accused.

Unreliable forensic interpretation. Timestamps, duplicates, thumbnails, fragments, hashes, age estimates, and software conclusions may have limits the report omits.

Official or professional exception. The statute excludes specified official duties and bona fide treatment or professional education in defined circumstances.

Unlawful search or statement. Probable cause, nexus, particularity, scope, custody, interrogation, and consent may support suppression.

Invalid count structure or multiple punishment. The charges may duplicate one act, mismatch dates, or seek punishment beyond what the legislature authorized.

Enhancement not proved. Prior status, registration, or under-14 age must be established as the enhanced provision requires.

What to do when police, a platform, or an employer contacts you

Do not open suspected files to investigate. Do not forward them to a lawyer, expert, friend, or employer. Record the notice you received and obtain legal advice about secure preservation.

Do not contact an alleged victim, sender, recipient, or witness. Preserve complete lawful conversations and account notices, but do not ask anyone to delete content or adopt an explanation.

List every person who used the devices and accounts, relevant passwords or shared access, remote tools, compromise notices, travel, repairs, resale, cloud services, and platform settings. Give that private chronology to counsel.

Obtain the warrant, affidavit, inventory, provider reports, full extraction, forensic report, interview recordings, and discovery. The defense should test the raw evidence rather than accept a detective’s summary.

Address immediate collateral concerns—employment, licenses, family orders, immigration, release conditions, and preservation deadlines—through coordinated legal advice.

Frequently asked questions