ENCRYPT Act of 2019

Bill: 116-hr-4170
Sponsor: full_name: Rep. Lieu, Ted [D-CA-33]
Introduced: 2019-08-06
Policy area: Crime and Law Enforcement
Subjects: Computer security and identity theft

Computers and information technology

Consumer affairs

Federal preemption

Intelligence activities, surveillance, classified information

Internet and video services

Internet, web applications, social media

Right of privacy

State and local government operations

Telephone and wireless communication
Latest action: action_date: 2019-09-25
text: Referred to the Subcommittee on Crime, Terrorism, and Homeland Security.

Summaries:
action_date: 2019-08-06
action_desc: Introduced in House
text: <p><b>Ensuring National Constitutional Rights for Your Private Telecommunications Act of 2019 or the ENCRYPT Act of 2019</b></p> <p>This bill prohibits a state from requiring a manufacturer, developer, seller, or provider of a technology product or service to (1) alter the security functions of its product or service to allow a government agency to conduct a physical search or user surveillance, or (2) use its product or service to decrypt encrypted information.</p> <p>A technology product or service includes a commercial computer product, electronic device, or online service that is publicly available.</p> <p>Additionally, it bars a state from prohibiting the manufacture, sale or lease, or provision of a technology product or service because it uses encryption or similar security functions.</p>

tv_txt: I 116th CONGRESS 1st Session H. R. 4170 IN THE HOUSE OF REPRESENTATIVES August 6, 2019 Mr. Ted Lieu of California (for himself, Ms. DelBene , and Mr. Jordan ) introduced the following bill; which was referred to the Committee on the Judiciary , and in addition to the Committee on Energy and Commerce , for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned A BILL To preempt State data security vulnerability mandates and decryption requirements.

1. Short title This Act may be cited as the Ensuring National Constitutional Rights for Your Private Telecommunications Act of 2019 or the ENCRYPT Act of 2019 . 2. Preemption of State data security vulnerability mandates and decryption requirements (a) In general A State or political subdivision of a State may not— (1) mandate or request that a manufacturer, developer, seller, or provider of covered products or services— (A) design or alter the security functions in its product or service to allow the surveillance of any user of such product or service, or to allow the physical search of such product, by any agency or instrumentality of a State, a political subdivision of a State, or the United States; or (B) have the ability to decrypt or otherwise render intelligible information that is encrypted or otherwise rendered unintelligible using its product or service; or (2) prohibit the manufacture, sale or lease, offering for sale or lease, or provision to the general public of a covered product or service because such product or service uses encryption or a similar security function. (b) Definitions In this section: (1) Covered product or service The term covered product or service means any computer hardware, computer software, electronic device, or online service that— (A) has traveled in interstate or foreign commerce or otherwise affects interstate or foreign commerce; and (B) is made available to the general public. (2) Online service The term online service means a service provided over the internet that makes available to users— (A) the ability to send or receive communications, such as emails, text messages, photos, and audio and video communications; (B) the ability to share data files with other users; or (C) remote computer processing or storage. (3) State The term State means each of the several States, the District of Columbia, each commonwealth, territory, or possession of the United States, and each federally recognized Indian Tribe.