ENCRYPT Act of 2025

The ENCRYPT Act of 2025 aims to prevent state and local governments from imposing certain data security requirements on technology companies. Specifically, it preempts any State or political subdivision from mandating or requesting that manufacturers, developers, sellers, or providers of covered products or services design security functions to allow surveillance or possess the ability to decrypt user information. Furthermore, the bill prohibits States from banning the manufacture, sale, or provision of a covered product or service simply because it incorporates encryption or similar security features. A covered product or service includes computer hardware, software, electronic devices, or online services available to the general public and affecting interstate commerce. This legislation seeks to ensure the widespread availability of strong encryption by preventing state-level mandates that could weaken security or create decryption requirements.