HR 2508 Re-checks Congress.gov for new actions and updates the bill's status, and fills in any sponsors, committees, or related bills that are missing. It does not re-pull sponsors/cosponsors/committees/related — those rarely change — and it skips all work if nothing has changed upstream, so it's cheap to click.
To preempt State data security vulnerability mandates and decryption requirements.
Summary
This bill prevents states and localities from requiring technology companies to weaken or remove encryption protections from their products and services. States and political subdivisions would be prohibited from mandating that manufacturers design products to allow government surveillance or to be able to decrypt encrypted information. The bill also prevents states from banning the sale or use of encrypted products and services due to their security features. The bill applies to computer hardware, software, electronic devices, and online services such as email and messaging platforms that are available to the general public.
AI-generated plain-language summary of the bill text — neutral, and may be imperfect. See the full text below for the exact wording.
Sponsor (1)
- Rep. Lieu, Ted [D-CA-36] (D-CA)
1 cosponsor
Money behind the sponsor
Top reported contributors to Ted Lieu’s campaign committee (2024 cycle) — who funds the bill’s sponsor, not a claim about this bill. Data from FEC.
- NOT-EMPLOYED $255,097
- NULL $21,050
- COTCHETT, PITRE & MCCARTHY, LLP $13,200
- TRENDNET $13,200
- NETFLIX $13,200
Organizations whose employees gave the most — itemized individual contributions grouped by the donor’s reported employer (FEC Schedule A). Full finance for Ted Lieu → · Outside spending →
Actions (2)
- Mar 31, 2025 Referred to the Committee on the Judiciary, and in addition to the Committee on Energy and Commerce, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned. · house
- Mar 31, 2025 Introduced in House
Similar bills (6)
Bills with similar text or summary — includes reintroductions across Congresses. Ranked by semantic similarity of the bill text (computed locally); a neutral discovery aid, not a claim the bills are duplicates.
Text versions (1)
Bills are re-published as they move (Introduced → Reported → Engrossed → Enrolled …). Each stage below is a separate text; pick two to see what changed. Data from Congress.gov.
Full text
IN THE HOUSE OF REPRESENTATIVES
March 31, 2025
Mr. Lieu (for himself and Ms. DelBene) introduced the following bill; which was referred to the Committee on the Judiciary, and in addition to the Committee on Energy and Commerce, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned
A BILL
To preempt State data security vulnerability mandates and decryption requirements.
Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled,
SECTION 1. SHORT TITLE.
This Act may be cited as the “Ensuring National Constitutional Rights for Your Private Telecommunications Act of 2025” or the “ENCRYPT Act of 2025”.
SEC. 2. PREEMPTION OF STATE DATA SECURITY VULNERABILITY MANDATES AND DECRYPTION REQUIREMENTS.
(a) In General.—A State or political subdivision of a State may not—
(1) mandate or request that a manufacturer, developer, seller, or provider of covered products or services—
(A) design or alter the security functions in its product or service to allow the surveillance of any user of such product or service, or to allow the physical search of such product, by any agency or instrumentality of a State, a political subdivision of a State, or the United States; or
(B) have the ability to decrypt or otherwise render intelligible information that is encrypted or otherwise rendered unintelligible using its product or service; or
(2) prohibit the manufacture, sale or lease, offering for sale or lease, or provision to the general public of a covered product or service because such product or service uses encryption or a similar security function.
(b) Definitions.—In this section:
(1) Covered product or service.—The term “covered product or service” means any computer hardware, computer software, electronic device, or online service that—
(A) has traveled in interstate or foreign commerce or otherwise affects interstate or foreign commerce; and
(B) is made available to the general public.
(2) Online service.—The term “online service” means a service provided over the internet that makes available to users—
(A) the ability to send or receive communications, such as emails, text messages, photos, and audio and video communications;
(B) the ability to share data files with other users; or
(C) remote computer processing or storage.
(3) State.—The term “State” means each of the several States, the District of Columbia, each commonwealth, territory, or possession of the United States, and each federally recognized Indian Tribe. <all>
Comments