This legislation seeks to significantly improve internet freedom and access to information for the Iranian people, recognizing that the Iranian government frequently disrupts internet connectivity and impedes human rights. It highlights the importance of satellite-based communications, Virtual Private Networks (VPNs), and embedded-SIM (eSIM) technology as crucial circumvention tools. The bill emphasizes that U.S. policy should promote these secure communication methods and ensure that sanctions do not unintentionally hinder their accessibility.

The bill designates the Secretary of State as the primary federal official responsible for promoting internet freedom in Iran and coordinating all related digital freedom initiatives across agencies. It mandates updates to the existing comprehensive strategy to promote internet freedom, requiring evaluations of VPN and Direct-to-Cell satellite use and strategies to increase their accessibility. Furthermore, the updated strategy must include working with the Departments of Treasury and Commerce to ensure sanctions do not impede technology access for Iranian civilians and developing ways to circumvent internet blackouts.

A key provision prevents the Federal Communications Commission (FCC) from issuing new licenses that would allow intentional disabling, degrading, or geo-blocking of satellite or Direct-to-Cell coverage over Iran. The Secretary of State is also directed to advocate internationally against proposals that would compel such geographic exclusion. Additionally, the bill requires the Secretary of State to establish programs providing remote or in-person cybersecurity training, vetted digital-safety tools like VPNs, and educational materials to journalists, human rights defenders, and civil society actors in Iran.

These programs will track quarterly metrics on trainees and tool usage, with an independent evaluation by the Comptroller General after three years. The legislation authorizes $15,000,000 for each of fiscal years 2027 and 2028 to carry out these cybersecurity and access expansion efforts, including secure VPN services. It clarifies that nothing in the Act authorizes transactions prohibited by U.S. sanctions or requires services in violation of such laws.