ENCRYPT Act of 2025

HR 2508, the ENCRYPT Act of 2025, prevents states from requiring technology companies to build backdoors into their products or services that would allow surveillance or decryption of user data. It specifically blocks states from mandating that companies alter security functions to enable government access to encrypted communications (like messages or files) or from banning encrypted products like smartphones or apps. The law applies to most internet-connected devices and services sold to the public that operate across state lines, directly affecting tech companies and state governments. This creates a uniform national standard, overriding any conflicting state laws about encryption.