(a)
In general— Except as provided in subsection (b), no agency may mandate or request that a manufacturer, developer, or seller of covered products design or alter the security functions in its product or service to allow the surveillance of any user of such product or service, or to allow the physical search of such product, by any agency.
(b)
Exception— Subsection (a) shall not apply to mandates authorized under the Communications Assistance for Law Enforcement Act (
47 U.S.C. 1001 et seq.).
(c)
Definitions— In this section—
(1)
the term agency has the meaning given the term in section 3502 of title 44, United States Code; and
(2)
the term covered product means any computer hardware, computer software, or electronic device that is made available to the general public.