ENCRYPT Act of 2025
- Bill Number
- H.R. 2508
- Origin Chamber
- House
- Congress
- 119th Congress, Session 1
- Policy Area
- Crime and Law Enforcement
- Status
- Introduced
- Latest Action
- 2025-03-31: Referred to the Committee on the Judiciary, and in addition to the Committee on Energy and Commerce, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
- Last Updated
- 2025-05-22T12:17:17Z
AI-Generated Summary
Purpose
The ENCRYPT Act of 2025 aims to protect the privacy and security of digital communications by preventing states and local governments from requiring technology companies to weaken encryption or create access points for surveillance. It emphasizes national standards for private telecommunications to uphold constitutional rights, such as privacy protections under the Fourth Amendment.
Key Provisions
- Prohibition on Mandates for Weakened Security: States or their political subdivisions (like cities or counties) cannot require or request that makers, developers, sellers, or providers of certain tech products or services:
- Design or change security features to enable surveillance of users or physical searches of devices by state, local, or federal agencies.
- Build in the ability to decrypt (unlock) or make readable any encrypted information created with their products or services.
- Ban on Restrictions for Using Encryption: States cannot outlaw the making, selling, leasing, or offering of these products or services simply because they include encryption or similar security tools.
- Scope of Covered Products and Services:
- Includes computer hardware, software, electronic devices, or online services (e.g., email, messaging apps, file-sharing platforms, or cloud storage) that are sold to the public and impact interstate or international commerce.
- Broad Definition of "State": Applies to all U.S. states, the District of Columbia, territories, possessions, and federally recognized Indian Tribes.
Significant Changes to Existing Law
- This bill introduces federal preemption, meaning it overrides any current or future state or local laws that conflict with these rules. Previously, states could potentially pass their own requirements for tech companies to provide access to encrypted data for law enforcement, but this act would make such laws invalid nationwide.
- It does not directly alter federal laws but indirectly limits how states can impose requirements that affect federal surveillance capabilities.
Potential Impacts
- On Government Agencies: State and local law enforcement may face challenges in accessing encrypted data for investigations, potentially slowing criminal probes. Federal agencies could benefit from uniform national rules but might encounter hurdles if states previously helped enforce access requirements.
- On Citizens: Enhances user privacy by ensuring strong encryption remains available without government-mandated "backdoors" (hidden access points), reducing risks of unauthorized surveillance and data breaches.
- On International Relations: Could influence global tech standards, as U.S. companies operating internationally might export stronger encryption tools without state-level restrictions, potentially affecting how other countries negotiate data access with U.S. firms.
- Overall, it promotes innovation in secure technology while possibly complicating multi-jurisdictional law enforcement efforts.
Main Stakeholders Affected
- Technology Companies: Manufacturers, developers, sellers, and providers of devices, software, and online services (e.g., Apple, Google, messaging app creators) gain freedom to implement robust encryption without state interference.
- State and Local Governments: Law enforcement and regulatory bodies lose authority to demand weakened security, which could limit their investigative tools.
- Citizens and Consumers: Everyday users of smartphones, apps, and online services benefit from stronger privacy protections.
- Federal Government: Agencies like the FBI or NSA may see indirect effects on data access, though the bill focuses on preempting state actions.
Notable Legal, Constitutional, or Political Implications
- Legal: Relies on the U.S. Constitution's Supremacy Clause (federal law overrides state law) and Commerce Clause (regulating interstate commerce) to justify preemption, potentially leading to court challenges from states arguing it infringes on their police powers (authority to enforce local laws).
- Constitutional: Bolsters Fourth Amendment rights against unreasonable searches by preventing mandated surveillance access, framing encryption as essential for private communications.
- Political: Represents a bipartisan push (introduced by Reps. Lieu and DelBene) for tech privacy amid debates over balancing security and civil liberties; it could spark tensions between federal uniformity and state autonomy, influencing future privacy legislation.
This summary was generated by AI and may contain inaccuracies. Refer to the official source document for the authoritative text.
Sponsor
Cosponsors (1)
Rep. DelBene, Suzan K. [D-WA-1]
Recent Actions
- 2025-03-31: Referred to the Committee on the Judiciary, and in addition to the Committee on Energy and Commerce, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
- 2025-03-31: Referred to the Committee on the Judiciary, and in addition to the Committee on Energy and Commerce, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
- 2025-03-31: Introduced in House
- 2025-03-31: Introduced in House
Bill Versions
- Ensuring National Constitutional Rights for Your Private Telecommunications Act of 2025 — issued 2025-03-31 — PDF (3 pages)