WeVote
Log In

Bill

Bill

SB 408

No High Risk Apps/Gov't Networks and Devices.

2025-2026 Session Introduced by Bobby Hanig and 2 co-sponsors

Bans TikTok and WeChat on government devices; blocks access and requires removal within 30 days for state/local employees and contractors.

Special Message Sent To House
#computers;emergencyservices;informationtechnology;internet;localgovernment;media;property;public;teleservices;property-localgovernment;property-stategovernment;publicsafetydept.;informationtechnologydept.;socialmedia
0
WeVote Research Nonpartisan
Bill Summary · SB 408

SB 408 — “No High Risk Apps / Gov’t Networks and Devices” (North Carolina)

Status: Special message sent to House (third edition engrossed 5/7/2025)
Introduced: March 25, 2025 (sponsors: Senators Moffitt, Hanig, Johnson)

Purpose

SB 408 prohibits use of specified “high‑risk” mobile and web applications on government‑owned devices and requires state and local agencies to block access to those applications on government information technology. The intent is to reduce data‑security and privacy risks associated with apps controlled by foreign entities.

Key provisions

  • Prohibition on government devices

    • No state employee, local government employee, or government contractor may download, use, or access a “covered application” on any government‑issued device (cell phone, desktop, laptop or other internet‑capable device issued by the State or a local political subdivision).
    • State agencies and local governments must restrict access to the websites of covered applications on government devices and IT systems.

  • Covered applications (defined)

    • Explicitly identifies TikTok (and successor apps/services developed or provided by ByteDance or entities owned by ByteDance) and WeChat (and successors developed or provided by Tencent or entities owned by Tencent) as covered applications.

  • Removal requirement

    • Any current employee or contractor who has already installed a covered application on a government device must remove/uninstall it within 30 days after the act becomes law.

  • Law‑enforcement and investigative exceptions

    • The prohibition does not prevent prosecutorial or law‑enforcement agencies (and in the engrossed Third Edition, also the Department of Adult Correction and State Auditor employees engaged in investigations) from accessing covered applications for official prosecutorial, law‑enforcement or investigative purposes.
    • The Departments of Information Technology and Public Safety are required to jointly develop access and risk‑mitigation guidelines for such uses (deadline in the engrossed version: March 1, 2026).

  • Scope of “information technology”

    • The bill adopts a broad definition of information technology (equipment, systems, software, services and related resources) consistent with state IT statutes; agencies must consider this when restricting access.

Who is affected

  • Primary: state and local government employees, officials and contractors who use government‑issued devices or government IT.
  • Secondary: state/local IT and security teams (must implement blocks, monitoring and policy changes); law‑enforcement/prosecutorial units and auditors (subject to exception procedures and new guidance).
  • No private‑party criminal penalties are specified; enforcement appears administrative (device/computer access controls and compliance by agencies).

Timeline / implementation

  • Removal of apps from existing government devices required within 30 days after the law takes effect.
  • IT/Public Safety guidance for investigative exceptions due by March 1, 2026 (engrossed text).
  • The act takes effect upon becoming law (no delayed effective date in the engrossed version).

Practical impact and considerations

  • Agencies will need to update acceptable‑use policies, configure web/mobile access controls, and implement removal/compliance tracking.
  • IT units must design and test blocking measures that do not unduly disrupt legitimate operations, and implement secure exception procedures for investigations.
  • The bill focuses on specific applications (TikTok, WeChat) but establishes a framework that could be extended to other “covered” apps by name in future amendments.

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.