I 
119TH CONGRESS 
1ST SESSION H. R. 2154 
To establish a cybersecurity literacy campaign, and for other purposes. 
IN THE HOUSE OF REPRESENTATIVES 
MARCH 14, 2025 
Mr. OBERNOLTE (for himself and Ms. MCCLELLAN) introduced the following 
bill; which was referred to the Committee on Energy and Commerce 
A BILL 
To establish a cybersecurity literacy campaign, and for other 
purposes. 
Be it enacted by the Senate and House of Representa-
tives of the United States of America in Congress assembled, 
SECTION 1. SHORT TITLE. 
This Act may be cited as the ‘‘American Cybersecu-
rity Literacy Act’’. 
SEC. 2. SENSE OF CONGRESS. 
It is the sense of the Congress that the United States 
has a national security and economic interest in promoting 
cybersecurity literacy amongst the general public. 
VerDate Sep 11 2014 
17:06 Mar 31, 2025
Jkt 059200
PO 00000
Frm 00001
Fmt 6652
Sfmt 6201
E:\BILLS\H2154.IH
H2154
ssavage on LAPJG3WLY3PROD with BILLS
SEC. 3. ESTABLISHMENT OF CYBERSECURITY LITERACY 
CAMPAIGN. 
(a) IN GENERAL.—The Assistant Secretary shall de-
velop and conduct a cybersecurity literacy campaign 
(which shall be available in multiple languages and for-
mats, if practicable) to increase the knowledge and aware-
ness of the American people of best practices to reduce 
cybersecurity risks. 
(b) CAMPAIGN REQUIREMENTS.—In carrying out 
subsection (a), the Assistant Secretary shall— 
(1) educate the American people on how to pre-
vent and mitigate cyberattacks and cybersecurity 
risks, including by— 
(A) instructing the American people on 
how to identify— 
(i) phishing emails and messages; and 
(ii) secure websites; 
(B) instructing the American people about 
the benefits of changing default passwords on 
hardware and software technology; 
(C) encouraging the use of cybersecurity 
tools, including— 
(i) multi-factor authentication; 
(ii) complex passwords; 
(iii) anti-virus software; 
VerDate Sep 11 2014 
17:06 Mar 31, 2025
Jkt 059200
PO 00000
Frm 00002
Fmt 6652
Sfmt 6201
E:\BILLS\H2154.IH
H2154
ssavage on LAPJG3WLY3PROD with BILLS
(iv) patching and updating software 
and applications; and 
(v) virtual private networks; 
(D) identifying the devices that could pose 
possible cybersecurity risks, including— 
(i) personal computers; 
(ii) smartphones; 
(iii) tablets; 
(iv) Wi-Fi routers; 
(v) smart home appliances; 
(vi) webcams; 
(vii) internet-connected monitors; and 
(viii) any other device that can be con-
nected to the internet, including mobile de-
vices other than smartphones and tablets; 
(E) encouraging Americans to— 
(i) regularly review mobile application 
permissions; 
(ii) decline privilege requests from mo-
bile applications that are unnecessary; 
(iii) download applications only from 
trusted vendors or sources; and 
(iv) consider a product’s life cycle and 
the developer or manufacturer’s commit-
ment to providing security updates during 
VerDate Sep 11 2014 
17:06 Mar 31, 2025
Jkt 059200
PO 00000
Frm 00003
Fmt 6652
Sfmt 6201
E:\BILLS\H2154.IH
H2154
ssavage on LAPJG3WLY3PROD with BILLS
a connected device’s expected period of use; 
and 
(F) identifying the potential cybersecurity 
risks of using publicly available Wi-Fi networks 
and the methods a user may utilize to limit 
such risks; and 
(2) encourage the American people to use re-
sources to help mitigate the cybersecurity risks iden-
tified in this subsection. 
(c) ASSISTANT SECRETARY DEFINED.—In this sec-
tion, the term ‘‘Assistant Secretary’’ means the Assistant 
Secretary of Commerce for Communications and Informa-
tion. 
Æ 
VerDate Sep 11 2014 
17:06 Mar 31, 2025
Jkt 059200
PO 00000
Frm 00004
Fmt 6652
Sfmt 6301
E:\BILLS\H2154.IH
H2154
ssavage on LAPJG3WLY3PROD with BILLS