Protecting Stolen Encrypted Data Act of 2026

[Congressional Bills 119th Congress] [From the U.S. Government Publishing Office] [S. 4230 Introduced in Senate (IS)] <DOC> 119th CONGRESS 2d Session S. 4230 To require the Federal Government to identify and address stolen sensitive data and classified information, and for other purposes. _______________________________________________________________________ IN THE SENATE OF THE UNITED STATES March 26, 2026 Ms. Hassan (for herself and Mrs. Blackburn) introduced the following bill; which was read twice and referred to the Select Committee on Intelligence _______________________________________________________________________ A BILL To require the Federal Government to identify and address stolen sensitive data and classified information, and for other purposes. Be it enacted by the Senate and House of Representatives of the United States of America in Congress assembled, SECTION 1. SHORT TITLE. This Act may be cited as the ``Protecting Stolen Encrypted Data Act of 2026''. SEC. 2. ADDRESSING STOLEN SENSITIVE DATA. (a) Definitions.--In this section: (1) Classified information.--The term ``classified information'' has the meaning given such term in section 805 of the National Security Act of 1947 (50 U.S.C. 3164). (2) Covered data.--The term ``covered data'' means includes the following: (A) Financial, medical, and biometric data of United States persons. (B) Intellectual property of United States persons. (C) Trade secrets of United States persons. (3) United states person.--The term ``United States person'' has the meaning given such term in section 101 of the Foreign Intelligence Surveillance Act of 1978 (50 U.S.C. 1801). (b) Addressing Stolen Sensitive Data.-- (1) Strategies to identify.--The President shall, acting through the Secretary of Defense and the Director of National Intelligence, develop strategies to identify-- (A) covered data and classified information unlawfully held by foreign entities; (B) whether such data and information were encrypted; and (C) w