A coalition of 35 industry groups is urging Congress to renew a critical law that provides legal protections for companies sharing cyber threat information with the federal government, as reported by Nextgov.
The groups are calling for the inclusion of a provision in the annual defense policy bill to extend the Cybersecurity Information Sharing Act of 2015 through 2035. This legislation, which currently faces a Dec. 11 expiration, shields firms from lawsuits and regulatory penalties when they disclose sensitive breach data to agencies such as the Federal Bureau of Investigation or the National Security Agency. Signatories, including the U.S. Chamber of Commerce and the American Bankers Association, argue that these legal protections are essential for maintaining the speed and breadth of information sharing required to counter modern adversaries.
Industry leaders warn that a lapse in the law would create significant legal risks, potentially discouraging private sector disclosures. While lawmakers have previously utilized stopgap measures to maintain the law, a long-term renewal remains stalled in the Senate. Disagreements persist over additional provisions, specifically regarding proposals to restrict federal influence over social media content. Supporters maintain that the current legal certainty is vital for national security and effective incident response across critical infrastructure sectors.
Source: Nextgov
