Rules of construction on encryption

(a) No requirement To weaken or impair encryption Nothing in this Act may be construed to require a provider of a social media platform or of any other interactive computer service or electronic communication service to— (1) decrypt or ensure an ability to decrypt an encrypted communication of a user; (2) preclude the use of any form of encryption, including end-to-end encryption, for any communication of a user; or (3) design, build, or implement any feature, function, software, hardware, or other capability for the purpose of weakening, undermining, circumventing, or overcoming any security control, including encryption, that is used to protect the privacy or security of any communication or data of a user. (b) Preservation of privacy and security This Act shall be implemented in a manner that— (1) respects and protects the privacy of a user and the security of any communication of a user; and (2) does not require or encourage the systemic surveillance or monitoring of any encrypted communication of a user or the creation of any capability that would allow for such systemic surveillance or monitoring. (c) Implementation of Act No requirement under this Act to restrict any feature for a covered user or to provide parental direct messaging controls for a direct messaging feature of a social media platform may be construed to override any protection for an encrypted communication described in this section and a provider of a social media platform shall adhere to any such requirement, to the maximum extent technically feasible, through means that do not compromise the integrity of strong encryption offered to any user of the social media platform.