Program and strategy to support internet freedom and counter censorship efforts in Iran

(a) In general Not later than 180 days after the date of the enactment of this Act, the Secretary of State, in conjunction with the Secretary of the Treasury and the CEO of the U.S. Agency for Global Media, shall establish a new interagency task force to support internet freedom and counter censorship efforts in Iran. In addition the Secretary of State, Secretary of Treasury and CEO of the U.S. Agency for Global Media, acting as part of this task force, shall develop and submit to Congress a strategy to support the Iranian people in countering state and non-state actors’ efforts to create deliberate barriers to internet access, including shutting down or slowing connectivity and blocking online content protected by international human rights standards. (b) Elements The strategy required under subsection (a) shall include the following: (1) A description of efforts to establish a Virtual Private Network (VPN) service specifically designed to enable the Iranian people to bypass government censorship and access the internet freely. The objectives of this VPN service shall include— (A) ensuring secure and uncensored internet access for users in Iran; (B) providing robust protection against surveillance and data interception by Iranian authorities and others; (C) maintaining high standards of speed and reliability to ensure usability; and (D) regularly updating and adapting the service to respond to new security challenges and censorship techniques employed by the Iranian government, IRGC and Iranian judiciary. (2) A description of the use of enhanced satellite communications through direct-to-cell technology and eSIM and eSIM device distribution, including— (A) the incorporation of services such as services that provide seamless internet access directly to cellular devices and other technology to facilitate seamless internet access in Iran; and (B) a program for the distribution of eSIMs and eSIM devices to individuals in Iran, enabling them to connect to satellite internet services quickly and securely. (3) A description of Iranian regime restrictions on the import of cell phones— (A) detailing Iranian government, IRGC, and Iranian judiciary restrictions on iPhone 14, iPhone 15, and iPhone 16 devices out of fear of satellite internet technology including requirements that such phones be registered with the government and the impact of past bans on such phones; (B) outlining steps to counter the regime’s efforts to restrict access to devices capable of utilizing satellite-based internet services; and (C) describing measures by the Secretary of State to curb any efforts by the regime to create secondary or black markets that would allow the Iranian government, IRGC, or Iranian judiciary or their affiliates to profit from the sale of these devices through controlled channels. (4) A detailed vetting plan for technology companies or individuals contracted to expand internet access in Iran, ensuring that no companies or individuals affiliated with the Iranian regime are involved in initiatives to promote internet freedom. (5) A description of which VPNs in Iran are built by the Islamic Revolutionary Guard Corps (IRGC) and other entities controlled by the Government of Iran or its Supreme Leader and how such VPNs are used by the regime to surveil and monitor users, as well as a plan to counter these deceptive tactics and raise public awareness about the risks associated with regime-affiliated VPNs. (6) A detailed plan to support satellite-to-cell internet technology in Iran, ensuring that— (A) such technology cannot be censored or jammed by the regime; and (B) access does not require the transfer or sale of hardware that could be controlled by the IRGC or sold on secondary markets. (7) providing secure communication tools, encryption technology, and cybersecurity software designed specifically for high-risk users; (8) cybersecurity training programs for Iranian activists, dissidents, and journalists focused on identifying regime-sponsored cyberattacks, phishing schemes, and digital surveillance tactics; (9) rapid response technical support for individuals and organizations experiencing cyber threats or attacks; and (10) a system of regular evaluation and reporting to Congress detailing cybersecurity threats encountered and measures undertaken to mitigate such threats. (c) Form The strategy required under subsection (a) shall be submitted in unclassified form. (d) Implementation plan Not later than 60 days after the date on which the strategy required by subsection (a) is developed, the task force shall submit to Congress a plan for implementing the strategy.