The Cybersecurity Information Sharing Act (CISA) was passed by the Senate early last week, and while it still has a few hoops to jump through before it is enacted into law, the hotly debated proposed rules may considerably impact both those organizations holding sensitive data and the users that data belongs to.
On one hand, the Act would extend protections to organizations who decide to share information with the Department of Homeland Security and the FBI, pooling it in a database designed to aid U.S. authorities in their ongoing war with cybercriminals. But on the other hand, privacy advocates believe the verbiage of the Act is far too broad in the protections it offers, and not explicit enough about how the government intends to use the information that it collects through its efforts.
