Generally, if you add contact info for law enforcement and copyright owners, you’re not liable for content hosted on your server, as long as you take appropriate action when notified.

What that action means differs. For some countries, that means “wipe the data without a trace and inform the police”. For others, you need to collect evidence and submit that to the police, or have the police access your server to collect their own evidence. In some jurisdictions, you’re allowed to verify that CSAM reports are factually correct and action needs to be taken, in others you’re obligated to trust the government and never ever look at those files.

You’re not going to jail over this, but it’s going to be really annoying to have to explain the Fediverse and how server-to-server communication means you don’t know what user uploaded the files to the police every couple of months.