Senate Intelligence Committee Leaders Release Discussion Draft of Encryption Legislation

Senate Select Committee on Intelligence Chairman Richard Burr (R-NC) and Vice Chairman Dianne Feinstein (D-CA) released the Compliance with Court Orders Act of 2016; draft legislation which reinforces that all entities must comply with court orders to protect Americans from criminals and terrorists. The senators will now solicit input from the public and key stakeholders before formally introducing the bill. The bill ensures that everyone must comply with court orders to protect America from criminals and terrorists.
Sense of Congress. The bill establishes that:
No one is above the law. Court order recipients must comply with the rule of law.
Providers of communications services and products should protect United States persons’ privacy with strong data security while still complying with court orders and other legal requirements.
Covered Entities are subject to the bill’s requirements. Covered Entities include device manufacturers, software manufacturers, electronic communication services, remote communication services, providers of wire or electronic communication services, providers of remote communication services, or any person who provides a product or method to facilitate a communication or to process or store data.
Covered Entities must provide information or data. Covered entities that receive a court order for information or data for the investigation or prosecution of specified serious crimes must provide it to the government in an intelligible format or provide the technical assistance necessary to do so.
Covered entities are responsible only for the information or data that they (or another party on their behalf) have made unintelligible.
Covered entities shall be compensated for the reasonably necessary costs incurred in providing the intelligible data or required technical assistance.
The government cannot require or prohibit any specific design or operating system for any covered entity to use in complying with a court order.
Certain communication service providers that distribute licenses for a covered entity’s products and services also must ensure that these products and services are capable of providing information or data in an intelligible format.
No new collection authorities. The bill does not create any new collection authorities for the government to obtain communications. The bill simply requires covered entities to ensure that the government’s lawfully-obtained evidence is readable—so that law enforcement can solve crimes and protect our communities from criminal and terrorist activities.