Sponsor
Pat Harrigan
Representative · R-NC
Representative · R-NC
The bill strengthens U.S. cybersecurity by codifying authorities and requirements for cryptographic defenses, but it risks reducing privacy protections and oversight while imposing compliance costs and potential legal uncertainty on affected organizations.
Tech-dependent businesses, government agencies, and critical infrastructure operators would gain a clear statutory framework to deploy defenses against advanced cryptographic attacks, strengthening national cybersecurity posture and resilience.
Government agencies and contractors would have codified legal authority to implement cryptographic protections, reducing legal uncertainty about defensive measures and making it easier to plan and carry out necessary cybersecurity actions.
Financial institutions and utilities would face stronger statutory requirements to protect critical systems, lowering the risk of service disruption, theft, or systemic financial harm.
People's digital privacy could be weakened if statutory cryptography mandates include measures like access requirements or key escrow, exposing sensitive data or increasing surveillance risks.
Granting executive-order directives the force of law may concentrate policymaking in the executive and reduce congressional oversight, shifting control over encryption and privacy rules away from the legislative process.
Businesses and organizations would likely incur new compliance and implementation costs to meet statutory cryptographic-defense requirements, which could be burdensome for smaller firms or resource-constrained entities.
Based on analysis of 1 section of legislative text.
Makes Executive Order 14412 on defending against advanced cryptographic attacks statutory law, giving its provisions immediate legal force.
Official title: To codify Executive Order 14412, entitled "Securing the Nation Against Advanced Cryptographic Attacks".
Introduced June 29, 2026 by Pat Harrigan · Last progress June 29, 2026
Treats Executive Order 14412, "Securing the Nation Against Advanced Cryptographic Attacks," as statutory law, making the Executive Order's provisions immediately binding as federal law upon enactment. The single-section measure does not itself add implementation instructions, funding, reporting deadlines, or specify agency roles — it simply gives the Executive Order the force and effect of law.